Arkansas Administrative Code Agency 220 - Office of Health Information Technology
1. What It Is
The Arkansas Administrative Code (AAC) contains the rules created by state agencies to implement laws passed by the Arkansas Legislature.
Agency 220 refers to the Office of Health Information Technology (OHIT).
OHIT is Arkansas’ state-level agency for managing health IT and electronic health information.
Its mission is to improve healthcare quality, efficiency, and security through technology.
Think of OHIT as the state’s “health IT manager”, making sure hospitals, clinics, and other providers can securely share and manage health information.
2. Purpose of OHIT Rules
The rules under Agency 220 exist to:
Improve Healthcare Quality
Support electronic health records (EHRs) and data exchange.
Make health data accessible for patient care and public health planning.
Ensure Data Security and Privacy
Comply with state and federal laws (like HIPAA).
Set standards for secure storage, transmission, and access to health information.
Promote Interoperability
Enable different healthcare providers and systems to share health data efficiently.
Avoid duplication of records or errors in care.
Support State Health Programs
Help Medicaid, public health, and other programs use technology for better service delivery.
Define Agency Responsibilities
Clarify OHIT’s role in oversight, certification, and guidance for healthcare IT systems.
3. Key Areas Covered by OHIT Rules
Agency 220 rules typically cover:
Health IT Governance
Policies for adopting, maintaining, and monitoring health IT systems.
Procedures for reviewing IT projects in healthcare facilities.
Electronic Health Records (EHRs)
Certification and standards for EHR systems.
Requirements for patient data entry, storage, and sharing.
Health Information Exchange (HIE)
Rules for sharing patient information between providers.
Requirements for secure data transfer and consent management.
Privacy and Security
Guidelines for protecting patient data from unauthorized access.
Requirements for encryption, access logs, and audit trails.
Data Reporting and Analytics
Standards for submitting health information to state programs.
Use of data to monitor health outcomes, track disease, and improve public health.
Compliance and Oversight
Procedures for audits, inspections, and corrective actions.
Enforcement for providers or systems that fail to meet rules.
4. Who It Applies To
Healthcare providers such as hospitals, clinics, and physicians.
Health IT vendors supplying electronic health record systems or health data solutions.
State health programs like Medicaid or public health initiatives.
Contractors managing or analyzing health data for the state.
Basically, anyone storing, sharing, or using electronic health information in Arkansas must comply with OHIT rules.
5. Why It’s Important
Patient Safety: Accurate electronic health records prevent errors in treatment.
Efficiency: Reduces paperwork, duplication, and delays in care.
Security: Protects sensitive patient information from breaches.
Interoperability: Makes it easier for providers to coordinate care.
Compliance: Helps Arkansas meet state and federal regulations for health data.
6. Example Scenarios
A hospital wants to implement a new EHR system:
Must comply with OHIT certification and interoperability standards.
A clinic shares patient data with another provider:
Must follow HIE rules for secure transfer and consent.
A health program analyzes Medicaid claims:
Must ensure data privacy and reporting standards are met.
A provider experiences a cybersecurity incident:
Must report to OHIT and follow state-mandated remediation steps.
✅ Summary
Agency 220 – OHIT manages health information technology in Arkansas.
Purpose: improve healthcare quality, ensure data security, and enable interoperability.
Key areas:
Health IT governance
Electronic health records (EHRs)
Health information exchange (HIE)
Privacy and security
Data reporting and analytics
Compliance and oversight
Applies to healthcare providers, vendors, state programs, and contractors.
Essential for secure, efficient, and coordinated healthcare in Arkansas.
RELATED Blog
comments