When the organization is part of an organized health care arrangement (OHCA) and chooses to use a joint Notice of Privacy Practices, it must ensure that a formal agreement is in place with all other participating covered entities. All parties must explicitly agree to the terms for information sharing outlined in the joint notice. This agreement must confirm that all parties will adhere to the terms of the joint notice for all protected health information (PHI) created or received as part of their involvement in the OHCA.
The organization must ensure that the joint notice clearly and specifically identifies
all the covered entities, or classes of entities, that are included under the notice, and describes how information will be shared among the covered entities within the organized health care arrangement.
