Skip to main content
Back To Top Top Back To Top
This website publishes administrative rules on their effective dates, as designated by the adopting state agencies, colleges, and universities.

Rule 5160:1-2-05 | Medicaid: notice of privacy practices.


(A) The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law requiring the administrative agency to issue a notice of privacy practices.

(B) The administrative agency shall:

(1) Ensure appropriate safeguards are taken in accordance with rule 5160-1-32 of the Administrative Code.

(2) Issue a notice of privacy practices to all individuals eligible for medical assistance, as described in 45 C.F.R. 164.520 (as in effect October 1, 2023), outlining all of the following descriptions of uses, disclosures, and procedures:

(a) A description of the types of uses and disclosures of protected health information (PHI) the administrative agency is permitted with examples for each of the following purposes:

(i) Payment; and

(ii) Treatment; and

(iii) Healthcare operations.

(b) A description of the uses and disclosures permitted without the individual's written consent or authorization.

(c) A statement that other uses and disclosures will be made only with the individual's written authorization.

(d) Complaint procedure.

(e) Request for restriction procedure.

(f) Request for amendment procedure.

(g) Request for accounting procedure.

(h) A name, or title, and telephone number of a person or office to contact for further information.

Last updated January 2, 2024 at 9:33 AM

Supplemental Information

Authorized By: 5162.031, 5163.02
Amplifies: 5162.031, 5163.02
Five Year Review Date: 1/1/2029
Prior Effective Dates: 10/1/1998, 10/6/2003, 11/1/2009, 1/1/2014, 1/1/2017