Include suspension requirements for authorized representatives in the authorized representatives policy.

CONTROL ID
13800

CONTROL TYPE
Establish/Maintain Documentation

CLASSIFICATION
Preventive

This Control directly supports the implied Control(s):

Establish, implement, and maintain an authorized representatives policy., CC ID: 13798

There are no implementation support Controls.

Implementation specification: Unemancipated minors. If under applicable law a parent, guardian, or other person acting in loco parentis has authority to act on behalf of an individual who is an unemancipated minor in making decisions related to health care, a covered entity must treat such person as… (§ 164.502(g)(3)(i), 45 CFR Part 164 - Security and Privacy, current as of July 6, 2020)
Implementation specification: Abuse, neglect, endangerment situations. Notwithstanding a State law or any requirement of this paragraph to the contrary, a covered entity may elect not to treat a person as the personal representative of an individual if: (§ 164.502(g)(5), 45 CFR Part 164 - Security and Privacy, current as of July 6, 2020)
The CSP SHALL establish written policy and procedures as to how a trusted referee is determined and the lifecycle by which the trusted referee retains their status as a valid referee, to include any restrictions, as well as any revocation and suspension requirements. (5.3.4 2, Digital Identity Guidelines: Enrollment and Identity Proofing, NIST SP 800-63A)