Oncology APCM HIPAA Compliance Checklist

Ensure all AI call handling vendors have a signed BAA specifically covering oncology patient data and treatment histories.

All recorded symptom monitoring calls for chemotherapy or immunotherapy patients must be encrypted at rest and in transit.

Restrict access to oncology call logs and summaries to authorized medical oncologists and oncology nurse navigators only.

Define clear timelines for how long AI-generated summaries of cancer survivorship calls are stored before being moved to the EMR.

Validate that AI call notes sync securely with oncology-specific EMRs like OncoEMR or Aria without exposing PHI to third parties.

Capture and securely store verbal consent for APCM enrollment during initial oncology intake or survivorship planning calls.

Explicitly document the cancer diagnosis and related comorbidities (e.g., neuropathy, fatigue) in the secure APCM log.

Maintain a secure record of notifying the patient about potential copays for survivorship monitoring and APCM services.

If using digital forms for survivorship program enrollment, ensure the storage platform meets HIPAA high-security standards.

Establish a secure process for patients to opt-out of APCM calls, particularly when transitioning to palliative or hospice care.

Ensure AI triage scripts for nausea, fever, or neutropenia do not store PHI in unencrypted temporary caches.

Securely log patient-reported pain levels and opioid usage discussed during APCM monitoring calls.

Protect data shared during nutrition and weight monitoring calls for patients undergoing active radiation or chemotherapy.

Maintain strict privacy for irAE (immune-related adverse events) reporting during automated follow-up calls.

Ensure that emergency transfers to oncology triage nurses maintain the secure data thread without leakage.

Use secure, timestamped logs to prove 20 minutes of non-face-to-face care management for oncology APCM billing.

Maintain a complete audit trail of who accessed AI-generated oncology patient summaries and when they were reviewed.

Document that APCM check-ins follow NCCN survivorship guidelines within the secure patient record.

Ensure the system securely flags secondary conditions like chemotherapy-induced anemia for APCM eligibility audits.

Cross-reference call logs with APCM codes 99490/99439 to ensure documentation supports the complexity of cancer care.