This resolution adds the Department of Homelessness and Supportive Housing, the Controller’s Office, and DataSF to the list of city departments recognized as Health Care Components under HIPAA. This designation allows these departments to handle health-related information in compliance with federal privacy regulations.
Resolution accepting the report of the City Administrator and adding the Department of Homelessness and Supportive Housing, the Controller’s Office, and DataSF to the previous designation that included the Department of Public Health, Fire Department, Health Service System, City Attorney, Treasurer-Tax Collector and Department of Technology, as Health Care Components under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), pursuant to Administrative Code, Chapter 22H.
How it got here
This legislation originated from the need to update the designation of City departments as Health Care Components under HIPAA, following a mandated review process established by a prior ordinance.
The Board enacted Administrative Code Chapter 22H, designating San Francisco as a HIPAA Hybrid Entity, requiring periodic reviews of City departments' functions.
The City Administrator submitted a report identifying the Department of Public Health, Fire Department, and Health Service System as Covered Entities, and the City Attorney, Treasurer-Tax Collector, and Department of Technology as Business Associates under HIPAA.
A citywide survey was conducted to assess the functions of City departments, leading to the identification of three new departments as Business Associates under HIPAA.
The City Administrator submitted an updated report to the Board of Supervisors, identifying the Department of Homelessness and Supportive Housing, the Controller’s Office, and DataSF as new Business Associates.
The resolution to accept the updated report and designate the new departments was introduced at the Board meeting.
The committee recommended the resolution for adoption by the Board of Supervisors.
The Board of Supervisors adopted the resolution, officially designating the new departments as Health Care Components under HIPAA.
Reconstructed from attached documents & the official record
