2015-149-Order No. 2015-021 Recorded 4/27/2015 COUNTY OFFICIAL
REVIEWED NANCY DESCHUTES COUNTY CLERK io 5.11
�� COMMISSIONERS ' JOURNAL 04/27/2015 07:58:58 Am
LEGAL COL SEL
IIIIIIIIlIIIIIIIIIIIUDI I III
2015-149
BEFORE THE BOARD OF COUNTY COMMISSIONERS OF DESCHUTES COUNTY, OREGON
Order for County's Adoption of Hybrid Entity
Status for HIPAA Purposes * ORDER NO. 2015-021
*
WHEREAS, the 1996 Health Insurance Portability and Accountability Act (HIPAA) and its
implementing regulations impose a variety of requirements on public entities to protect the privacy of
individually identifiable health information; and
WHEREAS, while some departments and divisions of Deschutes County government(the "Health Care
Components")regularly receive, create, maintain, use or share individually identifiable health information in the
performance of their duties, other departments and divisions of Deschutes County government(the"Non-Health
Care Components")do not;and
WHEREAS, the County has developed an organizational chart and list identifying the Health Care
Components and Non-Health Care Components of Deschutes County government(Attachment A hereto); and
WHEREAS, it is in the best interest of Deschutes County that only the Health Care Components of
Deschutes County government should be subject to HIPAA and its implementing regulations; now,therefore,
THE BOARD OF COUNTY COMMISSIONERS OF DESCHUTES COUNTY, OREGON, HEREBY
ORDERS as follows:
Section 1. Deschutes County is declared a"Hybrid Entity" for all purposes related to HIPAA
and its implementing regulations;
Section 2. The various departments and divisions of Deschutes County government are
identified as Health Care Components or Non—Health Care Components in accordance with the
organizational chart and list attached hereto as"Attachment A,"which chart and list may be revised
from time to time upon order of this Board;
Section 3. Erik Kropp, Deputy County Administrator, shall continue to serve as the County's
"Security Official" and "Privacy Official"for HIPAA purposes; and
PAGE 1 OF 2-ORDER NO.2015-021 (APRIL 2015)
Section 4: Mr. Kropp, as the County's Security Official and Privacy Official, shall develop and
implement HIPAA-compliant policies for the Health Care Components of County government, and
take such other steps are reasonably necessary to effectuate and implement the terms of this Order.
Dated this 22f tyl.L4,2015 BOARD OF COUNTY COMMISSIONERS
OF DESCHUTES COUNTY, OREGON
ANTHONY DEBONE, Chair
ALAN UNGER, Vice C air
ATTEST:
(6/P(114 Z-e-ke■L__
Recording Secretary TAMMY B•NEY, Corn oner
PAGE 2 OF 2-ORDER NO.2015-021 (APRIL 2015)
Deschutes County Organizational Chart—HIPAA Hybrid Entity
f (H th Care 1
Citizens of `` Poarb J
Deadwtes County
I
Bawd Pellet pinny Jute elate County Treaaeer
County Assessor Count'Oee County 9wM Rear
Appreue I Bees. Canadian PreseWOn in lead Ordnaw Inyeaatents
satrWekCamel Careud Court Nektons
I
Mseeennn I Doeunent Lew Enbrorsent Legal Camel Cnurty Treatment Coale tat Ostebuaen
Reutds Rsemary Adne le take
1 I
cebQeprty I Wel Reloads I AdMnitrsbwa County Lead Mai
Snood StMtes Oeparsnart
Property Tex ALMnialaasel
dunes Caul Roca Rings
I Ccurty I
MninMate
I
I Heath Services Solid Waste ® Road Department Commonly
Devebpmenl
l
Pudic Heath BeMvbral Heath Lindell Deposal Fir 6Expo Carter DswbpeAairaain Pleraing Adak ll
Parole ti Juvenile Justine
Rad System Probatbn
lieaml Ctdld&Family County Fair County surveyor Building safety Supervision Offender
Reproductive Noxious Weed Environmental Electrode Aherne
Heath Adult TreatmentRVPark Coned Sod Maiorng Detention
Maternal Chid Developmental Fleet Egiipment Cede Transitional ProbeOn&
Health Disadlites Services Enrercement Services Diversion
Woman,Infants 6 Access&Crisis GIS
Children(WIC) Services
/Woke&DNg
Plaaabm
arty Lemming
Course
internal Service Departments
Administrative Deputy County Finance/Tax
Services Mmn W rater
Internal Auu*ung 1 1 I I ACCeumerg
I
_properly&Facilities -�Risk Management H Personnel Information Veterans'Senecas Payroll
Public Inbrmation Tahnobgy
I I Budget
Natural Resource Bulling Comp Warkat Staff Recruitment Technobgy _ LOW Lio
Protection Maintenance ry
Tat Coletlion
I roPetY Geneal&VOride H Cenpeaasa Web Applicalions 'Uabilty
Management
Dog Licensing
Insurance GIS
Uarryleyment
Ineurana
Retirement
Americana sob Programs _
Oleadallee Ad
H Heath Bandits Attachment A to Order 2015-021
Page 1 of 2
DESCHUTES COUNTY -- List of"Health Care Components" for HIPAA purposes
The following list identifies those specific departments and divisions of Deschutes County
government identified as "Health Care Components"for HIPAA purposes. This list is intended
to be used in conjunction with the chart entitled"Deschutes County Organizational Chart—
HIPAA Hybrid Entity."
Board of County Commissioners
Community Justice—all divisions
County Administrator
County Sheriff--Corrections division only
Deputy County Administrator
Health Services—all divisions
Information Technology—Technology and Web Applications divisions only
Internal Auditing
Legal Counsel and County Legal Dept.
Personnel—Health Benefits division only
Risk Management—all divisions
Veterans Services
Attachment A to Order 2015-021
Page 2 of 2