Section
1. Purpose
2. Definitions
3. General statement of policy
4. Business associates
5. Patient privacy rights
6. Patient access request for access procedures
7. Storage of PHI
8. Procedure for amending PHI
9. Procedures for deidentification of PHI
10. Procedure for disposal of PHI
11. Administrative, technical and physical safeguards to protect PHI
12. Enforcement, sanctions and penalties for violations
13. Complaint procedure
14. Internal administration