HIPAA Compliance for Diabetes APCM Programs Checklist

Ensure all automated AI calls discussing A1C results or medication adjustments use end-to-end encryption.

Configure AI systems to avoid leaving specific clinical details like glucose readings in unverified voicemails.

Require MFA for staff accessing the AI dashboard containing diabetic patient communication logs.

Maintain detailed logs of every AI interaction regarding diabetic complication screenings and neuropathy follow-ups.

Verify that all cloud storage for recorded insulin titration calls meets SOC 2 and HIPAA requirements.

Limit access to diabetic retinopathy and nephropathy screening results to only necessary clinical personnel.

Assign unique IDs to every staff member monitoring AI call outcomes for gestational diabetes follow-ups.

Ensure AI portals used for APCM diabetes management automatically log out after periods of inactivity.

Establish protocols for accessing critical diabetic patient data during system outages or medical emergencies.

Immediately revoke access to the AI communication platform when a care coordinator leaves the practice.

Sign a Business Associate Agreement with Tile Healthcare or any AI vendor handling diabetic PHI.

Evaluate the security posture of AI tools used for CGM coverage criteria verification and patient education.

Confirm vendors have protocols for securely deleting diabetic patient data after the required retention period.

Ensure the BAA specifies timelines for notifying the practice of any unauthorized access to diabetic records.

Verify that any third-party services used by the AI vendor also adhere to HIPAA standards for diabetes care.

Record and store the patient's verbal or written consent to participate in the APCM program via the AI system.

Use AI to automatically track time spent on diabetic lifestyle counseling for APCM billing compliance.

Ensure that A1C tracking logs within the AI platform are integrated securely with the practice EHR.

Update your Notice of Privacy Practices to include the use of AI-powered call handling for diabetes management.

Establish a workflow for providing diabetic patients with copies of their AI call transcripts upon request.