Chapter 3793:1-1 General Provisions
3793:1-1-01
Public hearing notice for administrative rules.
(A) This rule describes the procedures that the Ohio department of alcohol and drug addiction services is to use for giving public notice for the adoption, amendment, or rescission of its rules pursuant to section 119.03 of the Revised Code.
(B) The department shall give public notice in the register of Ohio at least thirty days prior to the date set for the public hearing and contain the required elements as required under division (A) of section 119.03 of the Revised Code.
(C) The department shall furnish the public notice as required under section 119.03 of the Revised Code to any person who requests a copy of such notice in writing and who pays a reasonable fee, not to exceed the cost of copying and mailing.
(D) The department shall furnish the alcohol and drug addiction services boards, the alcohol, drug addiction and mental health services boards and all certified or licensed providers effected by the rule a copy of the public hearing notice and a copy of the proposed rule.
(E) Prior to the effective date of the rule, amendment, or rescission, the department shall make a reasonable effort to inform those affected by the rule, amendment, or rescission and to have available for distribution to those requesting it, the full text of the rule as adopted, amended, or rescinded.
Effective: 10/18/2010
R.C. 119.032 review dates: 07/23/2010 and 07/15/2015
Promulgated Under: 119.03
Statutory Authority: 3793.02
Rule Amplifies: 3793.02
Prior Effective Dates: 1-17-91 (Emer.); 7-1-91
3793:1-1-02
Definition of the term intervention.
(A) This rule defines the term "intervention" as required by division (D) of section 3793.02 of the Revised Code.
(B) "Intervention" is defined as any planned facilitation that may assist a person to be free from the use of alcohol, illicit drugs and the misuse of over-the-counter and prescription drugs.
R.C. 119.032 review dates: 07/23/2010 and 07/01/2015
Promulgated Under: 119.03
Statutory Authority: 3 793.02(D)
Rule Amplifies: 3793.02(D)
Prior Effective Dates: 7-10-92
(A) Purpose: The purpose of this rule is to establish guidelines for the coordination of services to children by agencies represented on local clusters and/or county councils and the Ohio family and children first cabinet council, which were created by section 121.37 of the Revised Code.
(B) Definitions:
(1) "Cabinet council" means the Ohio family and children first cabinet council created by division (A) of section 121.37 of the Revised Code.
(2) "Child" means a resident of Ohio who has not reached his/her twenty-first birthday.
(3) "Child with multiple needs" means a child whose service needs require the resources of two or more local agencies which are represented on the local cluster and/or county council.
(4) "Local agency" means an alcohol, drug addiction and mental health services board or an alcohol and drug addiction services board established under Chapter 340. of the Revised Code.
(5) "Local cluster and/or county council" means the county board created by division (D) of section 121.37 of the Revised Code, which is referenced in paragraph (E) of this rule.
(C) Division (A) of section 121.37 of the Revised Code creates the Ohio family and children first cabinet council. The cabinet council is required to be composed of the superintendent of public instruction and the directors of the department of alcohol and drug addiction services, department of youth services, department of human services, department of mental health, department of health, department of mental retardation and developmental disabilities, and office of budget and management. The chair of the cabinet council is the governor or his/her designee. The cabinet council shall establish procedures for its internal control and management. The purpose of the cabinet council is to help families desiring government services. Section 121.37 of the Revised Code shall not be interpreted or applied to usurp the role of parents, but solely to streamline and coordinate existing government services for families seeking assistance for their children. In seeking to fulfill its purpose, the cabinet council may do any of the following:
(1) Advise and make recommendations to the governor and general assembly regarding the provision of services to children,
(2) Advise and assess local governments on the coordination of service delivery to children,
(3) Hold meetings at such times and places as may be prescribed by the cabinet council's procedures and maintain records of such meetings, except those records which identify individual children are confidential and shall only be disclosed as provided by law,
(4) Develop programs and projects, including pilot projects, to encourage coordinated efforts at the state and local level to improve the state's social service delivery system,
(5) Enter into contracts with and administer grants to local clusters and/or county councils, as well as other county or multi-county organizations, to plan and coordinate service delivery between state agencies and local service providers for families and children,
(6) Enter into contracts with and apply for grants from federal agencies or private nonprofit organizations and
(7) On application of a local cluster and/or county council, grant an exemption from any rules adopted by a state department participating on the cabinet council if an exemption is necessary to implement a program for service delivery to families and children. The application shall describe the proposed program and specify the rules from which an exemption is necessary. The cabinet council shall approve or disapprove the application in accordance with standards which it shall adopt. An exemption shall be effective only during the period that the program is being implemented and a reasonable period during which the program is evaluated for effectiveness.
(D) The cabinet council shall review service and treatment plans for children with multiple needs for which such reviews are requested, and provide such assistance as the cabinet council determines to be necessary to meet the needs of children referred by local clusters and/or county councils.
(E) Division (D) of section 121.37 of the Revised Code requires each county to create a board which shall serve as the local cluster for services to youth, except that a county may establish a county family and children first council which shall assume the responsibilities of the local cluster. Each local cluster and/or county cluster shall be composed of the executive director of the local agency responsible for the administration of children services under section 5153.15 of the Revised Code. A representative of the respective regional office of the department of youth services, the superintendent of the county board of mental retardation and developmental disabilities, the executive director of the alcohol, drug addiction and mental health services board or the executive directors of mental health services boards and alcohol and drug addiction services boards, and the health commissioner of the board of health of each city or general health district in the county, or their designees. The superintendent of the city, exempted village, or local school district with the largest number of pupils residing in the county, as determined by the department of education, shall be a member of the local cluster and/or county council. The superintendent of all school districts with territory in the county, other than the city, exempted village, or local school district with the largest number of pupils residing in the county, shall meet and designate one of their number to represent them as a member of the local cluster and/or county council. A local cluster and/or county council may invite the juvenile court, or any other public or private agency or individual that provides services to children, to have a representative become a permanent or temporary member of the local cluster and/or county council. The local cluster and/or county council may also invite parents and other community leaders to become permanent or temporary members of the local cluster and/or county council. In seeking to fulfill its purpose, the local cluster and/or county council may do any of the following:
(1) Advise and make recommendations to the governor and general assembly regarding the provision of services to children,
(2) Hold meetings at such times and places as may be prescribed by the local cluster and/or county council's procedures and maintain records of such meetings, except those records which identify individual children are confidential and shall only be disclosed as provided by law,
(3) Develop programs and projects, including pilot projects to encourage coordinated efforts to improve the social delivery system,
(4) Enter into contracts and administer grants to plan and coordinate service delivery for families and children,
(5) Enter into contracts with and apply for grants from state and federal agencies or private non-profit organizations,
(6) Pool funds and/or develop other financing strategies to maximize the use of federal, state and local resources for services to families and children,
(7) Form a county council and apply to the cabinet council for an exemption from any rules adopted by a state department participating on the cabinet council if an exemption is necessary to implement a program for service delivery to families and children. The application shall describe the proposed program and specify the rules from which an exemption is necessary.
(F) Each local agency shall participate in the local cluster and/or county council established in its county and shall further work cooperatively with other members of the local cluster and/or county council to assure that services to children are delivered in a timely and coordinated manner and in the least restrictive environment. Each local agency or any member of the community shall bring to the attention of the local cluster and/or county council the case of any child or family who is a client of the local agency whose service needs have been assessed as not being able to be met by informal linkages to the other agencies within the county. At the request of the local cluster and/or county council, each local agency shall assess children who are not currently its clients to determine whether services are needed and can be provided by the local agency.
(G) Each local cluster and/or county council shall comply with the policies, procedures and activities prescribed by the rules adopted by a state department participating in the cabinet council to the extent that the local cluster and/or county council performs a function subject to those rules. Each local cluster and/or county council shall develop written policies and procedures for its efficient operation based upon guidance provided by the cabinet council. Such policies and procedures shall include a method for the appointment of a chairperson for the local cluster and/or county council.
(H) Upon referral of a child to it, the local cluster and/or county council shall, as soon as possible but no later than ninety days after the referral, develop and implement a joint service plan clearly describing the singular or joint service responsibilities to be performed on behalf of the child and/or his family by members of the local cluster and/or county council. The joint service plan shall also clearly delineate the allocation of service costs among local cluster and/or county council members. In cases where the service plan involves a child who is in the custody of a children services board, a county department of human services performing the county child welfare function, or the department of youth services, that board, department or regional office, as the case may be, shall also assume the primary responsibility for providing case management and record keeping services unless the joint service plan specifies otherwise. In all other cases, the primary responsibility for providing case management and record keeping services related to the joint service plan shall be assigned to a local cluster and/or county council member by consensus of the local cluster and/or county council, including the family, and such assignment shall be reflected in the joint service plan. The local agency designated as case manager shall obtain parental consent and input and shall keep the family informed of and involved in decisions made regarding services to be provided or denied.
(I) When a child who is subject to a joint service plan adopted pursuant to paragraph (H) of this rule, or recommended by the cabinet council pursuant to paragraph (J) of this rule, is determined by a local agency to no longer be in need of services provided by the local agency, such agency shall provide the local cluster and/or county council with written notification of that determination, including the reasons for that determination. Such notifications shall be provided at least thirty days prior to the planned or expected termination of services.
(J) In those instances where a local cluster and/or county council is unable to mutually devise a joint service plan for a child with multiple needs referred to it, or in those instances where the needs of a child cannot be met because existing or alternative programs and funding have been exhausted or are insufficient or inappropriate for the child and the family, the local cluster and/or county council shall refer the case to the cabinet council for a recommended resolution. The referral shall include evidence that the local cluster and/or county council has examined the case and attempted to resolve it locally and a proposed allocation of service costs to be borne by members of the local luster and/or county council. When there is a referral of a child with multiple needs to the cabinet council, the local cluster and/or county council shall notify the parent, guardian and any providers of services to or on behalf of the child of the referral. Notwithstanding a decision by the cabinet council on cases referred to it, each local cluster and/or county council shall be the final determiner of, and have responsibility for, the actual delivery of services necessary for the implementation of a joint service plan, including placement of the child, joint funding of services and overall management of the plan. The cabinet council may assist in funding a case referred by a local cluster and/or county council subject to applicable statutes, policies and appropriations available.
(K) Each local cluster and/or county council is responsible for coordination of the planning, developing and implementing of community based programs, services and resources to meet the needs of children and their families based upon community needs and available resources.
(L) Each local cluster and/or county council shall make periodic reports to the cabinet council regarding the number of children referred to the local cluster and/or county council and the progress made in meeting the needs of such children. At the request of the cabinet council, a local cluster and/or county council shall also provide periodic reports of the implementation status of joint service plans recommended by the cabinet council pursuant to paragraph (J) of this rule.
(M) Case records held by the cabinet council and each local cluster and/or county council are confidential. Each member of a local cluster and/or county council shall follow the appropriate confidentiality procedures when exercising its responsibilities. Non-governmental parties to state or local cluster and/or county council proceedings shall maintain the confidentiality of case records.
119.032 Review date: 9-1-00
Rule promulgated under: RC 119.03
Rule authorized by: RC 121.37
Rule amplifies: RC 121.37
Prior effective dates: Eff 5-12-94
(A) The purpose of this rule is describe the process whereby a government entity or private nonprofit agency incorporated to provide alcohol and drug addiction services may request state participation in construction or renovation of a certified residential and/or outpatient facilities for alcohol and drug addiction services to the extent that funds are available. The rule applies to funding appropriated by the general assembly to the department or funding appropriated by the general assembly to a specific alcohol and drug addiction program or board created under Chapter 340. of the Revised Code.
(B) The department shall set forth the criteria upon the availability of funds and provide notification of the funding availability. The department shall provide instructions to present an application that would result in recommended funding.
(C) Requirements for assistance under this section for funding that is not appropriated to a specific provider or board shall be as follows:
(1) Documentation that the project is consistent with their respective alcohol, drug addiction and mental health services board or alcohol and drug addiction services board, established by Chapter 340. of the Revised Code, community plan priorities.
(2) A notarized letter verifying proof of at least a twenty per cent match from the agency or the amount of match determined by the director pursuant to division (A) (3) of section 3793.20 of the Revised Code.
(3) Projects must include a written recommendation by their respective alcohol, drug addiction and mental health services board or alcohol and drug addiction services board supporting their application.
(4) Projects must fund an alcohol, drug addiction and mental health services board, an alcohol and drug addiction services board and/or an ODADAS certified non-profit provider.
(D) Prior to the disbursement of any state funds, the applicant shall enter into an agreement with the department which, subject to the department's discretion, shall contain at a minimum, the provisions set forth below:
(1) The applicant shall assure operation of the facility in accordance with the agreement.
(2) The applicant agrees to use and maintain the project for the length of the agreement for the purposes stated in the application unless otherwise agreed to in writing by the department. If the project ceases to be used for said purpose, the applicant shall reimburse the department a prorated amount of the state funds received by the applicant, or shall permit the department to operate or transfer the operation of the project, including the assignment of any contracts or other interests, to another approved organization for the balance of the agreement.
(3) The terms of the agreement shall expire the earlier of:
(a) Twenty-five years from date of the agreement, or
(b) The date when all capital bonds, any of the proceeds of which were expended for the project costs, are no longer outstanding.
(4) Applicant must agree to spend funds as proposed in the application unless the applicant submits a written change of intent request and obtains written approval from the department.
(5) The applicant must require all contractors and subcontractors to comply with all applicable federal, state and local laws in the performance of the work related to the project. The contractors and subcontractors shall accept full responsibility for payment of all unemployment compensation, insurance premiums, all income tax deductions, social security deductions and any and all other taxes or payroll deductions required for all employees engaged by the contractors and subcontractors in the performance of the work authorized by this contract.
(6) Applicant must agree to locate the project, or indicate that the project will be located upon real estate which the applicant owns in fee simple or in which the applicant has a long-term leasehold interest for a term of at least twenty-five years. Where the applicant holds a leasehold interest, the terms of lease are subject to the department's approval. The applicant must further covenant that the premises are, and shall remain for the term of the participation agreement, free and clear of all liens, encumbrances, restrictions and conditions which could prevent or interfere with the use of the project facilities, except such as may be imposed by zoning ordinances and regulation.
(7) The applicant shall grant the department a mortgage in the project premises to secure that the funds awarded for the project are used as specified in the agreement between applicant and the department. Where applicant holds a leasehold interest, applicant shall assist the department in obtaining a mortgage from the owner of the premises for the aforementioned purpose, or subject to the department's approval, the applicant shall provide the department an alternate security.
(8) The applicant shall obtain the services of registered architects or engineers to perform any design work required for the project through the department of administrative services, general services administration, state architect's 3793:1-1-04 2 office (SAO). The applicant shall also select a contractor through SAO.
(9) The applicant may be required to deposit matching funds into an escrow account maintained by the department.
Effective: 05/15/2009
R.C. 119.032 review dates: 05/15/2014
Promulgated Under: 119.03
Statutory Authority: 3793.20
Rule Amplifies: 3793.20
3793:1-1-06
Access to confidential personal information.
(A) Purpose
The purpose of this rule is to establish guidelines for regulating access to the confidential personal information that is maintained by the Ohio department of alcohol and drug addiction services.
(B) Definitions
(1) "Access," when used in this rule as a noun, means an opportunity to copy, view, or otherwise perceive.
(2) "Access," when used in this rule as a verb, means to copy, view, or otherwise perceive.
(3) "Acquisition of a new computer system" means the purchase of a "computer system," as defined in this rule, that is not a computer system currently in place nor one for which the acquisition process has been initiated as of the effective date of this rule.
(4) "Computer system" means a "system," as defined in section 1347.01 of the Revised Code, that stores, maintains, or retrieves personal information using electronic data processing equipment.
(5) "Confidential personal information" has the same meaning as defined in division (A)(1) of section 1347.15 of the Revised Code and identified by rules promulgated by the department in accordance with division (B)(3) of section 1347.15 of the Revised Code that reference the federal or state statutes or administrative rules that make personal information maintained by the department confidential.
(6) "Department" means the department of alcohol and drug addiction services
(7) "Employee" means each employee of the department regardless of whether he/she holds an elected or appointed office or position within the department.
(8) "Incidental contact" means contact with the information that is secondary or tangential to the primary purpose of the activity that resulted in the contact.
(9) "Individual" means a natural person or the natural person's authorized representative, legal counsel, legal custodian, or legal guardian.
(10) "Information owner" means the individual appointed in accordance with division (A) of section 1347.05 of the Revised Code to be directly responsible for a system.
(11) "Person" means a natural person.
(12) "Personal information" has the same meaning as defined in division (E) of section 1347.01 of the Revised Code.
(13) "Personal information system" means a "system" that "maintains" "personal information" as those terms are defined in section 1347.01 of the Revised Code. "System" includes manual and computer systems.
(14) "Research" means a methodical investigation into a subject.
(15) "Routine" means common place, regular, habitual, or ordinary.
(16) "Routine information that is maintained for the purpose of internal office administration, the use of which would not adversely affect a person," as that phrase is used in division (F) of section 1347.01 of the Revised Code, means personal information relating to the department's employees that is maintained by the department for administrative and human resources purposes.
(17) "System" has the same meaning as defined in division (F) of section 1347.01 of the Revised Code.
(18) "Upgrade" means a substantial redesign of an existing system for the purpose of providing a substantial amount of new application functionality, orapplication modifications that would involve substantial administrative or fiscal resources to implement, but would not include maintenance, minor updates and patches, or modifications that entail a limited addition of functionality due to changes in business or legal requirements.
(C) Criteria for accessing confidential personal information: Personal information systems of the department are managed on a "need-to-know" basis whereby the information owner determines the level of access required for an employee of the department to fulfill his/her job duties. The determination of access to confidential personal information shall be approved by the employee's supervisor and the information owner prior to providing the employee with access to confidential personal information within a personal information system. The department shall establish procedures for determining a revision to an employee's access to confidential personal information upon a change to that employee's job duties including, but not limited to, transfer or termination. Whenever an employee's job duties no longer require access to confidential personal information in a personal information system, the employee's access to confidential personal information shall be removed.
(D) Individual's request for a list of confidential personal information. Upon the signed written request of any individual for a list of confidential personal information about the individual maintained by the department, the department shall:
(1) Verify the identity of the individual by a method that provides safeguards commensurate with the risk associated with the confidential personal information;
(2) Provide to the individual the list of confidential personal information that does not relate to an investigation about the individual or is otherwise not excluded from the scope of Chapter 1347. of the Revised Code; and
(3) If all information relates to an investigation about that individual, inform the individual that the department has no confidential personal information about the individual that is responsive to the individual's request.
(E) Notice of invalid access
(1) Upon discovery or notification that confidential personal information of a person has been accessed by an employee for an invalid reason, the department shall notify the person whose information was invalidly accessed as soon as practical and to the extent known at the time. However, the department shall delay notification for a period of time necessary to ensure that the notification would not delay or impede an investigation or jeopardize homeland or national security. Additionally, the department may delay the notification consistent with any measures necessary to determine the scope of the invalid access, including which individuals' confidential personal information was accessed invalidly, and to restore the reasonable integrity of the system. Once the department determines that notification would not delay or impede an investigation, the department shall disclose the access to confidential personal information made for an invalid reason to the person. "Investigation" as used in this paragraph means the investigation of the circumstances and involvement of an employee surrounding the invalid access of the confidential personal information.
(2) Notification provided by the department shall inform the person of the type of confidential personal information accessed and the date(s) of the invalid access.
(3) Notification may be made by any method reasonably designed to accurately inform the person of the invalid access, including written, electronic, or telephone notice.
(F) Appointment of a data privacy point of contact and completion of a privacy impact assessment
(1) The director of the department shall designate an employee of the department to serve as the data privacy point of contact.
(2) The data privacy point of contact shall work with the chief privacy officer within the Ohio department of administrative services office of information technology to assist the department with both the implementation of privacy protections for the confidential personal information that the department maintains and compliance with section 1347.15 of the Revised Code and the rules adopted pursuant to the authority provided by that chapter.
(3) The data privacy point of contact shall timely complete the privacy impact assessment form developed by the Ohio department of administrative services office of information technology.
(G) Valid reasons for authorized employees to access confidential personal information Pursuant to the requirements of division (B)(2) of section 1347.15 of the Revised Code, performing the following functions constitutes valid reasons for authorized employees to access confidential personal information:
(1) Responding to a public records request.
(2) Responding to a request from an individual for the list of confidential personal information the department maintains on that individual.
(3)http://schemas.microsoft.com/office/word/2003/wordml013fAdministering a constitutional provision or duty.
(4) Administering a statutory provision or duty.
(5) Administering an administrative rule provision or duty.
(6) Complying with any state or federal program requirements.
(7) Processing or payment of claims or otherwise administering a program with individual participants or beneficiaries.
(8) Auditing purposes.
(9) Licensure, certification, and accreditation processes.
(10) Investigation or law enforcement purposes.
(11) Administrative hearings.
(12) Litigation, complying with an order of the court or subpoena.
(13) Human resources matters (e.g., hiring, promotion, demotion, discharge, salary/compensation issues, leave requests/issues, timekeeping approvals/issues).
(14) Complying with an executive order or policy.
(15) Complying with a department policy or a state administrative policy issued by the Ohio department of administrative services, the office of budget and management, or other similar state agency.
(16) Complying with a collective bargaining agreement provision.
(17) Research in furtherance of agency-specific programs as permitted by statute.
(H) The following regulations are the most widely applicable legal provisions that make personal information maintained by the department confidential. Other provisions may apply under particular circumstances.
(1) 42 C.F.R. Part 2 (Confidentiality of alcohol and drug abuse patient records).
(2) Division (D) of section 5101.46 of the Revised Code (Title XX).
(3) Section 3793.13 of the Revised Code (confidentiality)
(4) 5 U.S.C. 552a (social security numbers).
(5) 42 U.S.C. 1320d ("Health Insurance Portability and Accountability Act"statutes).
(6) 42 U.S.C. 1396a (a)( 42 U.S.C. 5 ) (medicaid records).
(7) 45 C.F.R. parts 160 to 164 ("Health Insurance Portability and Accountability Act" rules).
(I) For personal information systems that are computer systems and contain confidential personal information, the department shall:
(1) Restrict access to confidential personal information that is kept electronically by requiring a password or other authentication measure.
(2) When the department acquires a new computer system that stores, manages, or contains confidential personal information, include a mechanism for recording specific access by employees to confidential personal information in the system.
(3) When the department modifies an existing computer system that stores, manages, or contains confidential personal information, make a determination whether the modification constitutes an upgrade. Any upgrades to a computer system shall include a mechanism for recording specific access by department employees to confidential personal information in the system.
(4) Logging requirements regarding confidential personal information in existing computer systems.
(a) The department shall require employees who access confidential personal information within computer systems to maintain a log that records that access. The department may choose the form or forms of logging, whether in electronic or paper formats.
(b) Access to confidential information is not required to be entered into the log under the following circumstances:
(i) The department employee is accessing confidential personal information for official department purposes, including research, and the access is not directed toward a specifically named individual or a group of specifically named individuals.
(ii) The department employee is accessing confidential personal information for routine office procedures and the access is not directed toward a specifically named individual or a group of specifically named individuals.
(iii) The department employee comes into incidental contact with confidential personal information and the access of the information is not directed toward a specifically named individual or a group of specifically named individuals.
(iv) The department employee accesses confidential personal information about an individual based upon a request made by an individual requesting confidential personal information about himself/herself or the individual makes a request that the department take some action on that individual's behalf that requires accessing confidential personal information in order to process that request.
(J) Log management
(1) The department shall issue a log management policy that specifies the following:
(a) Who shall maintain the log;
(b) What information shall be captured in the log;
(c) How the log is to be stored; and
(d) How long information kept in the log is to be retained.
(2) Nothing in this rule limits the department from requiring logging in any circumstance that it deems necessary.
Effective: 10/04/2010
R.C. 119.032 review dates: 07/15/2015
Promulgated Under: 119.03
Statutory Authority: 1347.15, 3793.02
Rule Amplifies: 1347.01, 1347.05, 3793.02