HIPAA Compliance for ID APCM Programs Checklist

Ensure any AI service provider signs a Business Associate Agreement specifically addressing the handling of sensitive HIV and STI data.

Verify that all recorded interactions regarding antiretroviral therapy (ART) adjustments are encrypted at rest and in transit.

Configure AI to automatically redact Social Security numbers and secondary identifiers from call logs used for care coordination.

Restrict access to APCM call dashboards to only authorized ID clinical staff and designated billing managers.

Maintain immutable logs of every instance where a patient's chronic infection history is accessed within the AI platform.

Use AI voice prompts to capture and timestamp patient consent for APCM enrollment during initial outreach calls.

Cross-reference APCM data sharing protocols with the specific confidentiality mandates of the Ryan White HIV/AIDS Program.

Provide patients with an immediate, AI-driven way to opt-out of phone reminders for sensitive lab work or STI screenings.

Obtain specific, recorded authorization before the AI or staff discusses HIV status with a patient's designated caregiver.

Update your Notice of Privacy Practices to explicitly mention the use of AI-powered assistants for chronic care management.

Utilize AI to automatically log the exact duration of non-face-to-face care provided to meet the monthly APCM time requirements.

Ensure AI-captured data regarding medication adherence for Hepatitis B is directly synced to the patient's electronic health record.

Validate that the AI logic correctly identifies patients meeting IACCI criteria for APCM eligibility based on ICD-10 codes.

Maintain records of AI-initiated calls for Long COVID symptom tracking to prove proactive management for CMS audits.

Review AI-generated summaries to ensure they support the specific G-codes or CPT codes used for APCM in Infectious Disease.