N.M. Admin. Code § 8.300.2.23 - STAFF TRAINING

All members of the HCC workforce shall be trained within appropriate timeframes on HIPAA privacy policies and procedures regarding the proper use and disclosure of PHI 45CFR 164.530(b).

A. Initial training: The HCC shall:

(1) develop a training plan with HCC supervisory staff involvement to determine the timing of and level of training appropriate to members of the HCC workforce;

(2) develop bureau-specific training curricula and materials; the training material shall be maintained for six years;

(3) provide bureau-specific training for the current HCC workforce no later than July 1, 2003; and

(4) ensure documentation of initial training completion and forward documentation to the HCA office of human resources.

B. Continuous training: For HCC workforce members who begin employment or whose job functions change subsequent to July 1, 2003, HCC shall:

(1) within one working day of start date, notify the PSO of the new HCC workforce member, and schedule training for the new workforce member to be completed within 10 working days of the start date;

(2) for HCC workforce members whose job functions change, and who thus require a new level of training, notify the PSO and schedule the training prior to having the workforce member assume the new job duties; employees must successfully complete training within 10 working days of their start date, and evidence of training must be provided to the HCA office of human resources; and

(3) the HCA office of human resources shall retain the original signed training documentation for six years.

C. Privacy policy changes: When changes are made to HCC policies or procedures or when HCC changes its privacy practices 45CFR 164.530(b)], HCC shall:

(1) prepare relevant changes to the bureauspecific curricula;

(2) prepare changes to training materials;

(3) retain the training material for six years;

(4) after determining affected staff with supervisor involvement, develop a training plan;

(5) ensure that the HCC workforce successfully completes training and provide individual signed documentation of training to the PSO;

(6) the PSO shall forward the individual documentation of training to the HCA office of human resources; and

(7) the HCA office of human resources shall retain the original signed training documentation for six years.

Notes

N.M. Admin. Code § 8.300.2.23

8.300.2.23 NMAC - N, 7-1-03; A, 9-15-08, Adopted by New Mexico Register, Volume XXXV, Issue 12, June 25, 2024, eff. 7/1/2024