Scope
Define covered locations, staff categories, patients, contractors, and circumstances when the policy applies.
A written Healthcare COVID Policy reduces operational uncertainty, documents infection-control measures, and demonstrates efforts to comply with HIPAA and public-health guidance. It helps unify clinical and administrative practices and supports consistent decision-making during exposures, outbreaks, or regulatory inspections.
Several internal roles typically contribute to, approve, and follow the policy to ensure clinical and legal alignment.
Effective policies include input from all these groups and clear assignment of responsibilities for enforcement and updates.
Define covered locations, staff categories, patients, contractors, and circumstances when the policy applies.
Specify symptom screening, testing triggers, test types accepted, frequency, and documentation for positive or exposed staff or patients.
State whether vaccination is required, if exemptions are permitted, and the process for documenting consent or declination.
Provide evidence-based return-to-work criteria aligned with CDC guidance and local public health directives.
Describe how COVID-related health data is stored, who may access it, HIPAA protections, and retention periods.
Assign responsibility for policy updates, incident investigations, communications, and regulatory reporting.
| Field | Configuration |
|---|---|
| Signature Field | Require signer name, signature, and date; lock after signing. |
| Acknowledgement Checkbox | Require affirmative check and timestamp for consent. |
| Routing | Route drafts to clinical, HR, and legal in sequence using role-based order. |
| Retention Tag | Apply metadata for retention period and access controls. |
Choose a platform that supports secure e-signatures, audit trails, access controls, and HIPAA-level protections if handling PHI.
Ensure the platform provides HIPAA BAA options when PHI is present, integrates with your document repository, and enables export in standard formats for legal or regulatory review.
Set an effective date and document approvals.
Review at least annually or when guidance changes.
Within 30 days after an exposure or outbreak.
Provide training within 30–60 days of adoption.
Retention period begins on effective date.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial, no credit card | Verify with vendor | Verify with vendor | Verify with vendor | Verify with vendor |
| Bulk Send | Available on select plans | Available | Available | Available | Varies by plan |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes (BAA available) | Yes (BAA available) | Yes (BAA available) | Confirm with vendor | Confirm with vendor |