About 31% of behavioral health provider organizations evaluated by the Accreditation Commission for Health Care (ACHC) were cited in 2020 and 2021 for having incomplete policies that fell short of industry standards for securing and releasing consumers’ protected health information (PHI). None of the organizations were cited for failing to appropriately manage consumer’s PHI; the citation meant that the organization’s policies needed to include more detail for how it communicated with consumers and employees about securing and sharing consumer PHI.
The citations indicated that the organizations’ policies and procedures failed to address the need to communicate policies to . . .