HIPAA Privacy and Security Rules

HIPAA Privacy and Security Rules are intended to enforce standards of ethics and confidentiality.NARM recommends that all CPMs address HIPAA compliance in their professional practice and determine their status as a “covered entity” under HIPAA. More information on whether you are “covered entity” required to comply with HIPAA can be found on the HHS.gov Website.

NARM requires that ALL CPMs, even those not designated as “covered entities,” address the following standards for disclosure of personal health information (PHI) in their professional documents of informed disclosure/informed consent.

CPMs must have permission from their clients to allow students to access medical records for the purpose of education or verification of documentation for their NARM application.

CPMs must disclose to their clients that they participate in regular peer review, which can sometimes necessitate confidential disclosure of health information for the purpose of reviewing the midwife’s professional conduct.

More information can be found on our HIPAA for CPMs web page at http://narm.org/professional-development/hipaa.