Good morning, everyone.

This meeting will come to order.

Welcome to the regular meeting of the Public Safety and Neighborhood Services Committee of the San Francisco Board of Supervisors for Thursday, October 9th, 2025.

I'm Supervisor Matt Dorsey, Chair of this committee.

I'm joined today by Vice Chair Balal Makmood and Supervisor Danny Sauter.

Our always capable clerk today is Ms.

Monique Creighton, whom we thank for staffing us today.

And together we'd like to express our appreciation to Jaimea Shaveri and the entire team at SFGov TV for facilitating and broadcasting today's meeting.

Madam Clerk, do we have any announcements?

Yes, please make sure to silence all cell phones and electronic devices documents to be included as part of the file.

Should be submitted to the clerk.

Public comment will be taken on each item on this agenda.

When your item of interest comes up and public comment is called, please line up to speak on your right.

Alternatively, you may submit public comment in writing either of the following ways.

First, you may email them to myself, the Public Safety and Neighborhood Services Committee Clerk at M O N IQ E dot C R A Y T O N at S F G O V dot O R G.

Or you may send your written comments via U.S.

Postal Service to our office in City Hall.

Number one, Dr.

Carlton B.

Goodlick Place, Room 244, San Francisco, California 94102.

If you submit public comment in writing, it will be forwarded to the supervisors and also included as part of the official file on which you are commenting.

Finally, items acted upon today are expected to appear on the Board of Supervisors Agenda of October 21st, 2025, unless otherwise stated.

Thank you, Madam Clerk.

Will you please call the first item?

Yes, uh, the first item is a resolution accepting the report of the city administrator and adding the Department of Homelessness to Support of Housing, the Controller's Office, and Data SF to the previous designation that included the Department of Public Health, Fire Department, Health Service System, City Attorney, Treasurer, Tax Collector, and Department of Technology as health care components under the Health Insurance Portability and Accountability Act of 1996, HIPAA Persuant Administrative Code Chapter 22H.

Thank you, Madam Clerk.

This item was introduced by the Office of the City Administrator and Vivian Ho, the director of central office and engagement is here to present.

Thank you.

Good morning, Chair Dorsey, Supervisor Mahmood, and Supervisor Softer.

Thank you for having me today.

And my name is Vivian Poe.

I serve as the Director of Central Office and Engagement in the City Administrator's Office.

For this item in front of you, I took on the role of project manager, working very closely with our legislative team and the city attorney's office to prepare the report and the resolution.

Well, the purpose of this project is to identify city agencies that are subject to HIPAA data protections.

Before I begin, I want to acknowledge my project partner, Deputy City Attorney.

He'll be here soon, Arnouval Medina.

He's our HIPAA expert in the project and also representatives from departments who are subject to HIPAA data protections.

They are available for questions after my presentation.

So very quickly, our first slide here is a high-level summary of our project.

But for your background, in 2020, the city passed an ordinance creating Chapter 22H in our admin code, which designates San Francisco as a HIPAA hybrid entity.

That simply means that our city performs many, many different functions, and only some of them would fall under HIPAA.

So HIPAA regulations apply only to those with specific functions.

And because of this destination, our office is required to take a look of the functions performed by city departments every three years in order to identify those that are subject to HIPAA, which are called health care components.

In 2021, our office, the city administrator's office, issued our first report and resolution.

At that time, we identified six departments, including the Department of Public Health, the Fire Department, Health Service System, City Attorney's Office, the Treasurer and Text Collector's Office, and the Department of Technology as health care components.

Fast forward to today.

We have recently completed our second three-year report.

In this report, we added three more departments: the controller's office, the Department of Homelessness and Support of Housing, and Data SF.

And we have submitted the report and the resolution for the Board of Supervisors to accept the report and to designate it, those we just mentioned in the report as HIPAA healthcare components.

Next slide, please.

I'll move quickly very quickly on this slide because I just want to mention that healthcare components come in two categories.

Cover entity and business associate.

As you will see these terms repeating themselves in the report and the resolution.

Cover entities include health care comp uh health care providers and health plans that transmit protective health information.

In our case, those would be DPH, FIRE, HSS, as we mentioned.

Business Associates, on the other hand, perform functions for a cover entity that involve the use or disclosure of health information.

For us, those includes the city attorney, TTX, DT, and the three new departments that we just mentioned.

Next slide, please.

To give you a sense on how we put together this new report, we use two main paths.

Well, first, we reconnect it with the six departments designated back into 2021.