Laserfiche WebLink
The Plan's Plan Documents are amended to require that the Plan Sponsor reasonably and <br />appropriately safeguards ePHI that it receives, maintains or transmits on behalf of the group <br />healt}i plan. <br />13. Documentation <br />[§164.316(b)(1), §164.316(b)(2)(i)] <br />The Plan(s) will maintain written (which may be in electronic form) policies and procedures <br />necessary to comply with the HIPAA Security Standards. <br />• Documentation will be retained for 6 years from the date of its creation or the date when it was <br />last in effect, whichever is later. <br />• The documentation will be made available to persons responsible for implementing the <br />procedures to which the documentation pertains. <br />• The Plan(s) mill review all documentation periodically, and update as needed, in response to <br />environmental or operational changes affecting the security of the ePHI. <br />