NRPM: Standards for Privacy of Individually Identifiable Health Information. 10. Documentation of policies and procedures. (§§164.520)


Covered entities would be required to document policies and procedures for use and disclosure of protected health information relating to this regulation, including elements listed in §164.520, and would need to maintain one copy of each version of its notice of information practices, and authorization forms. See §164.520(f) for a full list of recordkeeping requirements.