Our Mission

 The purpose of this policy is to describe the need for, adherence to, commitment to and duration of confidentiality required to be kept by employees and agencies of You Shine Too. Any communication must fall within the permitted uses of PHI (treatment, payment, healthcare operations) or be explicitly authorized by the individual in writing. Confidentiality is needed to protect confidential information of clients, employees, contractors, and agents, and to preserve the integrity of collaboration. Employees and contractors may be required to sign a non-disclosure agreement as a condition of employment/contract. Employees or contractors who improperly use or disclose trade secrets or confidential business information will be subject to disciplinary action, up to an including termination of employment and legal action, even if they do not actually benefit from the disclosed information.

Adherence to Policy

Employees and agents should understand their continued employment and contract is contingent on adherence to all privacy, information sharing and confidentiality policies. It is the responsibility of the employees and agents to confirm a valid release of information is in place prior to making contact to another agency, party or community support.

o Permitted (No Authorization Required): Communications related to the individual's services such as eligibility or assistance to sign up for a program. These interactions must be documented with administration immediately.

o Prohibited (Authorization Required): Communications /interactions that provide supports normally covered under supports within the agency such as: recovery, housing, employment and community supports.

o Professional Boundaries: Beyond HIPAA, agents and employees must consider professional ethics and boundaries, ensuring that communication after the professional relationship ends does not create inappropriate dual relationships or dependency.

o Minimum Necessary Standard: Ensure any permitted communication only uses the minimum amount of PHI necessary to achieve its purpose

o Security: All electronic communications must comply with the HIPAA Security Rule, including encryption for any PHI transmitted.

Notice to Participants

All participants must be provided information about the agency and the collaboration’s confidentiality policies and practices, and his/her rights under such policies.

Duration of Confidentiality

The obligation to maintain confidentiality does not end when the service to a participant is concluded; nor does confidentiality end on the death of the participant in many jurisdictions. Confidentiality extends to all current and former participants who seek services. A release should be reasonably time- limited as determined by the purpose of the release and the circumstances of the participants situation.