Our Quality Manager has asked me to get involved in trying to figure out what all it means for us and to update everything necessary to be in compliance. What I've read so far seems VERY similar to PHI for HIPAA. Do you know if there's some kind of template for organizations to create their internal policies and procedures for handing PHI?