R. Gregory Cochran, MD, JD
|
|
- Hillary Foster
- 5 years ago
- Views:
Transcription
1 California Academy of Attorneys for Health Care Professionals October 19-21, 2012 Government Subpoenas (and other Requests) and Health Privacy Considerations R. Gregory Cochran, MD, JD
2 Overview Overview of HIPAA and California s Confidentiality of Medical Information Act (CMIA) Overview of government healthcare agencies that issue subpoenas 2
3 Overview When HIPAA and CMIA come into play How HIPAA and CMIA affect subpoena responses 3
4 Take Home CMIA trumps HIPAA re subpoena responses Err on de-identifying patients when responding 4
5 Take Home Be sure to enter into BAA with your health provider clients Be sure to enter into HIPAA-compliant subcontractor agreement with your experts/consultants 5
6 Subpoena Court or administrative order that requires the provider to testify at a specific time 6
7 Subpoena Duces Tecum Requires the provider to produce documents or other items at a specified time and place 7
8 HIPAA Health Insurance Portability and Accountability Act of 1996 protected health information (PHI): individually identifiable health information transmitted or maintained in any form or medium covered entity: a health plan, a healthcare clearinghouse, or a healthcare provider who transmits any health information in electronic form 8
9 CMIA California Confidentiality of Medical Information Act (1979) (Civ. Code 56 et seq) medical information: any individually identifiable information in possession of or derived from a health care provider, a health plan, or pharmaceutical company regarding a patient s medical history, mental or physical condition or treatment. provider of healthcare, healthcare service plan, or contractor 9
10 HIPAA v. CMIA California health providers must meet obligations under both schemes Preemption: HIPAA governs unless state provisions are more stringent more patient protection wins out 10
11 HIPAA v. CMIA HIPAA: business associate rules Attorneys who use PHI that their provider clients give them in the course of the representation are BAs of their clients. HIPAA: minimum necessary rule 11
12 HIPAA v. CMIA HIPAA: CEs must give individuals advanced notice about how they handle PHI HIPAA: CEs must obtain patient consent for use of PHI for treatment, payment and operations 12
13 HIPAA: Exceptions to Minimum Necessary Standard Disclosures to providers for treatment Disclosures to the individual/patient Uses & disclosures required by law Disclosures to DHHS/OCR for enforcement Uses and disclosures with authorization 13
14 HIPAA & CMIA: Penalties HIPAA No private right of action under HIPAA Cal. B&P 17200? ERISA CMIA Patients may bring actions for violations of CA law: compensatory damages, punitive damages ( 3,000), attorney fees ( 1,000) 14
15 HIPAA v. CMIA: Penalties (cont d) HIPAA CMIA Knowingly disclosing, obtaining or using is criminal offense 100/violation, not exceeding 25,000/year (civil fine) Any violation is misdemeanor Negligent disclosure: up to 2,500/violation (civil fine) 15
16 HIPAA v. CMIA: Penalties (cont d) HIPAA Knowingly disclosing, obtaining or using (up to 50,000 and/or 1 year) CMIA Knowingly and willfully obtaining, disclosing or using (up to 25,000/violation) False pretenses (up to 100,000 and/or 5 years) 16
17 HIPAA v. CMIA: Penalties (cont d) HIPAA CMIA For commercial or personal gain or malicious harm (up to 250,000 and/or 10 years) For financial gain (up to 250,000 per violation and disgorgement) 17
18 HIPAA v. CMIA HIPAA CMIA 120+ pages (1996) ~12 pages (1979) 18
19 Examples of Agencies that May Seek PHI Medical Board of California (MBC): for physician investigations California Department of Public Health (CDPH): for facility licensing proceedings U.S. Department of Justice: for False Claims Act investigations 19
20 HIPAA Exceptions Scheme Broad exception categories: Uses and disclosures for treatment, payment or operations (TPO) Authorization required Opportunity to object required (e.g., directories, individual s care) Opportunity to object not required (e.g., required by law; public health; abuse reporting; health oversight; judicial/admin; law enforcement; decedents; organ donation; research; etc.) 20
21 When Agencies Do Not Need Subpoenas to Obtain Medical Information (CMIA) Private or public bodies responsible for licensing or accreditation may review medical information on site, but may not remove or further disclose Medical information may be disclosed when otherwise specifically authorized by law 21
22 When Agencies Do Not Need Subpoenas to Obtain PHI (HIPAA) Under HIPAA, a covered entity may disclose PHI to a health oversight agency for oversight activities (opportunity to object not required) 22
23 When Agencies Do Not Need Subpoenas to Obtain PHI (HIPAA) health oversight agency: a federal or state agency (or person or entity acting under the agency s authority) authorized by law to oversee the health care system (whether public or private) or government programs in which health information is necessary to determine eligibility or compliance, or to enforce civil rights laws for which health information is necessary 23
24 When Agencies Do Not Need Subpoenas to Obtain PHI (HIPAA) health oversight agencies: Medical Board of California Board of Registered Nursing Department of Public Health CMS 24
25 When Agencies Do Not Need Subpoenas to Obtain PHI (HIPAA) oversight activities include: audits; civil, administrative, or criminal investigations; inspections; licensure or disciplinary actions; civil, administrative, or criminal proceedings or actions; or 25
26 When Agencies Do Not Need Subpoenas to Obtain PHI (HIPAA) other activities necessary for appropriate oversight of: The health care system; Government benefit programs for which health information is relevant to beneficiary eligibility; Entities subject to government regulatory programs for which health information is necessary for determining compliance with program standards; or Entities subject to civil rights laws for which health information is necessary for determining compliance. 26
27 HIPAA and Subpoenas: Overview A court order or subpoena signed by a judge requires no assurances or notification to the patient (presumption of privacy protection) CE should strictly comply without disclosing more PHI than is ordered 27
28 HIPAA and Subpoenas: Overview A subpoena or discovery request signed an attorney requires either proof of notice to the patient (but no opportunity to object) or a qualified protective order 28
29 CMIA and Subpoenas: Overview CMIA also permits compliance with subpoenas, with no distinction as to signatories Cal. Code of Civil Procedure (b) requires the subpoenaing party to also serve the consumer whose records are sought, and notify them how to object 29
30 CMIA and Subpoenas: Overview If Individual Objects (CCP ) he/she must file papers with the court if he/she is a party to the action, he/she may bring a motion to quash or modify the subpoena 30
31 CMIA and Subpoenas: Overview If Individual Objects (CCP ): any other consumer or nonparty may serve on the subpoenaing party a written objection that cites the specific grounds the subpoenaing party may bring a motion under Section to enforce the subpoena. accompanied by a declaration showing a reasonable and good faith attempt at informal resolution of the dispute with the consumer 31
32 De-identified PHI No notice or consent required if patient information de-identified. 32
33 De-identified PHI PHI is de-identified when it does not identify an individual and there is no reasonable basis to believe that it can be used to identify an individual De-identified PHI is neither PHI nor subject to HIPAA s restrictions 33
34 How to De-identify PHI Remove any of 18 different identifiers (listed in 45 CFR ) (e.g., names, dates and SSNs), such that there is no reasonable basis to believe it can be used to identify an individual; or Statistical method: an expert certifies that the risk is very small that the information could lead to identification 34
35 How to De-identify PHI CMIA does not discuss de-identification Individually identifiable means that the medical information includes or contains any element of personal identifying information sufficient to allow identification of the individual, such as the patient's name, address, address, telephone number, social security number, or other information that, alone or in combination with other publicly available information, reveals the individual's identity. 35
36 HIPAA Subpoena Exceptions (f): disclosure of PHI to law enforcement key concepts: investigational; cannot deidentify (e): disclosures for judicial and administrative proceedings key concepts: notice to patient; must deidentify to the extent allowed by the subpoena 36
37 HIPAA Subpoena Exceptions: Law Enforcement (f): disclosure of PHI to law enforcement in six circumstances one of which pertains to subpoenas. Core requirements: relevance and materiality to investigation cannot de-identify request is reasonable in scope 37
38 HIPAA Subpoena Exceptions: Law Enforcement Law enforcement official is a federal or state officer or employee of any agency who is empowered by law to: (1) Investigate or conduct an official inquiry into a potential violation of law; or (2) Prosecute or otherwise conduct a criminal, civil, or administrative proceeding arising from an alleged violation of law. 38
39 HIPAA Subpoena Exceptions: Law Enforcement CE may disclose PHI in response to an administrative request, including an administrative subpoena or summons, a civil or an authorized investigative demand, or similar process authorized under law, provided that: 1. The information sought is relevant and material to a legitimate law enforcement inquiry; 2. The request is specific and limited in scope to the extent reasonably practicable in light of the purpose for which the information is sought; and 3. De-identified information could not reasonably be used. 39
40 Hypothetical A: Medical Board of California The MBC asks to see a hospital s patient records in connection with a complaint investigation (no subpoena). HIPAA: CE may disclose to a health oversight agency engaged in a licensure or disciplinary action 40
41 Hypothetical A: Medical Board of California CMIA: PHI may be reviewed by a private or public body responsible for licensing or accrediting the provider of health care or health care service plan. 41
42 Hypothetical A: Medical Board of California CMIA: However, no patient-identifying PHI may be removed from the premises except as expressly permitted or required elsewhere by law, Agency may not further disclosed it in a way that would violate CMIA. 42
43 Hypothetical A: Medical Board of California Which is more protective? CMIA 43
44 Hypothetical B: Medical Board of California The MBC subpoenas a hospital s patient records in connection with a complaint investigation. CMIA: hospital shall comply but must also provide notice to affected patients under Cal. Civ. Pro
45 Hypothetical B: Medical Board of California If subpoenaed: HIPAA: CE may comply provided that: 1. The information sought is relevant and material to a legitimate law enforcement inquiry; 2. The request is specific and limited in scope to the extent reasonably practicable in light of the purpose for which the information is sought; and 3. De-identified information could not reasonably be used. 45
46 Hypothetical B: Medical Board of California Which is more protective? CMIA 46
47 Hypothetical C: Medical Board of California The MBC requests a licensee s own patient records in connection with a complaint investigation or 805 report (no subpoena). E.g., Greg Abram s client situation. HIPAA: the provider may disclose to a health oversight agency engaged in a licensure or disciplinary action 47
48 Hypothetical C: Medical Board of California CMIA: PHI may be reviewed by a private or public body responsible for licensing or accrediting the provider of health care or health care service plan. without removing patient-identifying PHI without further disclosing it in a way that would violate CMIA (including in public documents e.g., an Accusation) 48
49 Hypothetical B: Medical Board of California Which is more protective? CMIA 49
50 Hypothetical C: Medical Board of California MBC subpoenas licensee s PHI: HIPAA: provider may comply if: 1. The information sought is relevant and material to a legitimate law enforcement inquiry; 2. The request is specific and limited in scope to the extent reasonably practicable in light of the purpose for which the information is sought; and 3. De-identified information could not reasonably be used. 50
51 Hypothetical C: Medical Board of California MBC subpoenas licensee s PHI: CMIA: provider shall comply but must also provide notice to affected patient (here, the licensee) under Cal. Civ. Pro
52 Hypothetical C: Medical Board of California Which is more protective? CMIA 52
53 Hypothetical D: California Department of Public Health The CDPH requests a hospital s patient records in connection with an immediate jeopardy accusation. under HIPAA, hospital may disclose to a health oversight agency engaged in a licensure or disciplinary action under CMIA, a hospital may allow a private or public body responsible for licensing or accreditation to review information, but the body may not remove the information 53
54 Hypothetical D: CDPH Which is more protective? CMIA 54
55 Hypothetical E: California Department of Public Health CDPH subpoenas a hospital s patient records in connection with an accusation against a hospital. hospital shall comply (per CMIA) but must also provide notice to patients affected under Cal. Civ. Pro
56 Hypothetical E: California Department of Public Health HIPAA: hospital may comply provided that: 1.The information sought is relevant and material to a legitimate law enforcement inquiry; 2.The request is specific and limited in scope to the extent reasonably practicable in light of the purpose for which the information is sought; and 3.De-identified information could not reasonably be used. 56
57 Hypothetical E: Medical Board of California Which is more protective? CMIA 57
58 Questions? 58
59 Contact Info R. Gregory Cochran, MD, JD Nossaman, LLP 50 California Street, Ste San Francisco, CA
FEDERAL AND STATE BREACH NOTIFICATION LAWS FOR CALIFORNIA
FEDERAL AND STATE BREACH NOTIFICATION LAWS FOR CALIFORNIA LEGAL CITATION California Civil Code Section 1798.82 California Health and Safety (H&S) Code Section 1280.15 42 U.S.C. Section 17932; 45 C.F.R.
More informationUSE AND DISCLOSURE OF PROTECTED HEALTH INFORMATION WITHOUT AUTHORIZATION
USE AND DISCLOSURE OF PROTECTED HEALTH INFORMATION WITHOUT AUTHORIZATION Policy The Health Science Center may disclose protected health information without a patient authorization in the following circumstances:
More informationUSES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION: HIPAA PRIVACY POLICY
Page Number 1 of 8 TITLE: PURPOSE: USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION: HIPAA PRIVACY POLICY To assure that individually identifiable health information contained in any University Health
More informationNotice of HIPAA Privacy Practices Updates
Notice of HIPAA Privacy Practices Updates The following is a summary of the updates to the privacy notice for Meridian Hospitals Corporation, Meridian Home Care Services, Inc., Meridian Nursing & Rehabilitation,
More informationNATIONAL ASSOCIATION FOR STATE CONTROLLED SUBSTANCES AUTHORITIES (NASCSA) MODEL PRESCRIPTION MONITORING PROGRAM (PMP) ACT (2016) COMMENT
1 NATIONAL ASSOCIATION FOR STATE CONTROLLED SUBSTANCES AUTHORITIES (NASCSA) MODEL PRESCRIPTION MONITORING PROGRAM (PMP) ACT (2016) SECTION 1. SHORT TITLE. This Act shall be known and may be cited as the
More informationRelease of Medical Records in Ohio OHIMA. Ohio Revised Code (ORC) HIPAA
Release of Medical Records in Ohio OHIMA March, 2010 Ann Hubbuch, JD, RHIA Vice President Corporate Compliance Licking Memorial Health Systems Ohio Revised Code (ORC) One part of the puzzle What controls.hipaa
More informationNOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES This notice describes how Pine Creek Medical Center may use and disclose your medical information, and how you may access this information. Please read through and review it
More informationTypes of Authorized Recipients Probation/Parole Officers or the Department of Corrections
Types of Authorized Recipients Probation/Parole Officers or the Department of Corrections Research current through May 2016. This project was supported by Grant No. G1599ONDCP03A, awarded by the Office
More informationCAPITAL SURGEONS GROUP, PLLC
CAPITAL SURGEONS GROUP, PLLC NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW
More informationPatient Privacy Requirements Beyond HIPAA
Patient Privacy Requirements Beyond HIPAA Jane Hyatt Thorpe, J.D. School of Public Health and Health Services George Washington University Carrie Bill, J.D. Feldesman Tucker Leifer Fidell LLP The George
More informationCHI Mercy Health. Definitions
CHI Mercy Health Definitions If you have any questions about this notice, please contact the CHI Mercy Health s Privacy Office at (701) 845-6540 or 570 Chautauqua Blvd, Valley City ND 58072. Notice of
More informationNotice of Privacy Practices
River Valley Chiropractic LLC Notice of Privacy Practices Effective 9/2014; Revised 9/2014 If you have any questions about this notice, please contact the River Valley Chiropractic Privacy Officer at 308-534-5840.
More informationWHAT IS HIPAA? HIPAA is the ELECTRONIC transmission of Three programs have been enacted to date Privacy Rule April 2004
Rev. 1/22/2010 HIPAA TRAINING WHAT IS HIPAA? Health Insurance Portability and Accountability Act HIPAA is the ELECTRONIC transmission of Three programs have been enacted to date Privacy Rule April 2004
More informationHIPAA Policies and Procedures Manual
UNIVERSITY of NORTH CAROLINA at CHAPEL HILL SCHOOL of NURSING HIPAA Policies and Procedures Manual November 2015 1 Table of Contents I. INTRODUCTION... 3 A. GENERAL POLICY... 3 B. SCOPE... 3 II. DEFINITIONS...
More informationNOTICE OF PRIVACY PRACTICES
BUTTE COUNTY DEPARTMENT OF BEHAVIORAL HEALTH NOTICE OF PRIVACY PRACTICES Effective Date: 4/14/2003 THIS NOTICE DESCRIBES NOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS
More informationPRIVACY POLICY USES AND DISCLOSURES FOR TREATMENT, PAYMENT, AND HEALTH CARE OPERATIONS
PRIVACY POLICY As of April 14, 2003, the Federal regulation on patient information privacy, known as the Health Insurance Portability and Accountability Act (HIPAA), requires that we provide (in writing)
More informationThe HIPAA Privacy Rule and Research: An Overview
The HIPAA Privacy Rule and Research: An Overview Joy Pritts, JD Research Associate Professor Health Policy Institute Georgetown University jlp@georgetown.edu 1 Topics HIPAA Background Overview of Privacy
More informationNotice of Privacy Practices
2269 CHERRY VALLEY ROAD, NEWARK, OH 43055 (740) 788-1400 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW
More informationNOTICE OF PRIVACY PRACTICE UNIVERSITY OF CALIFORNIA SAN FRANCISCO DENTAL CENTER
Effective Date: February 1, 2018 NOTICE OF PRIVACY PRACTICE UNIVERSITY OF CALIFORNIA SAN FRANCISCO DENTAL CENTER THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW
More informationSUMMARY OF NOTICE OF PRIVACY PRACTICES
LAKE REGIONAL MEDICAL GROUP 54 HOSPITAL DRIVE OSAGE BEACH, MO 65065 SUMMARY OF NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU
More informationNOTICE OF PRIVACY PRACTICES
EFFECTIVE DATE: APRIL 14, 2003 NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW
More informationPARAGOULD DOCTORS CLINIC PRIVACY NOTICE
PARAGOULD DOCTORS CLINIC PRIVACY NOTICE Protected Health Information THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE
More informationDISCIPLINARY PROCEDURE
KANSAS STATE BOARD OF HEALING ARTS 800 SW Jackson, Lower Level-Suite A Topeka, Kansas 66612 (785) 296-7413 or Toll Free (888) 886-7205 (785) 368-7103 (FAX) www.ksbha.org DISCIPLINARY PROCEDURE The Kansas
More informationHIPAA PRIVACY NOTICE
HIPAA PRIVACY NOTICE PLEASE REVIEW THIS NOTICE CAREFULLY. IT DESCRIBES HOW YOUR MEDICAL INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU MAY GAIN ACCESS TO THAT INFORMATION. POLICY STATEMENT This Practice
More informationDEPARTM PRACTICES. Effective: Tel: Fax: to protecting. Alice Gleghorn, Page 1
SANTA BARBARA COUNTY DEPARTM MENT BEHAVIORAL WELLNESS NOTICE OF PRIVACY PRACTICES Effective: September 27, 2013 / Revision: January 7, 2015 This notice describes how medical information about you may be
More informationMental Health. Notice of Privacy Practices
Effective June 2017 Notice of Privacy Practices Mental Health This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review
More informationFERPA, CHALLENGES FACING SCHOOL NURSES & DISCIPLINARY ACTIONS FERPA. MELANIE BALESTRA, MN, NP, JD JD August May 4, 22, 2012
FERPA, CHALLENGES FACING SCHOOL NURSES & DISCIPLINARY ACTIONS FERPA MELANIE BALESTRA, MN, NP, JD JD August May 4, 22, 2012 Definition Family Education Rights and Privacy Act of 1974 (Buckley Amendment)
More informationWRAPPING YOUR HEAD AROUND HIPAA PRIVACY REQUIREMENTS
WRAPPING YOUR HEAD AROUND HIPAA PRIVACY REQUIREMENTS Jeffrey Staton Attorney at Law Legal Aid Society of Louisville 416 W. Muhammad Ali Blvd., Ste. 300 Louisville, KY 40202 Phone: 502.614.3146 Jstaton@laslou.org
More informationNotice of Privacy Practices
Notice of Privacy Practices, pg. 1 of 5 Notice of Privacy Practices CATHOLIC CHARITIES OF THE ROMAN CATHOLIC DIOCESE OF SYRACUSE, NY This notice describes the privacy practices of Catholic Charities of
More informationThe University of Toledo. Corporate Compliance and HIPAA Training. Presented by: The Compliance and Privacy Office
The University of Toledo Corporate Compliance and HIPAA Training Presented by: The Compliance and Privacy Office Topics Compliance HIPAA (Health Insurance Portability and Accountability Act) FERPA( Family
More informationOREGON HIPAA NOTICE FORM
MARCIA JOHNSTON WOOD, Ph.D. Clinical Psychologist 5441 SW Macadam, #104, Portland, OR 97239 Phone (503) 248-4511/ Fax (503) 248-6385 - Effective Sept.23, 2013 - (This copy for you to keep) OREGON HIPAA
More informationPEDIATRIC HEALTH ASSOCIATES HIPAA NOTICE OF PRIVACY PRACTICES
Policy effective date: 4-14-2003 Revised January 2014 PEDIATRIC HEALTH ASSOCIATES HIPAA NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND
More information42 CFR Part 2: Improvements and New Challenges with the Use and Disclosure of Substance Use Disorder Treatment Records
42 CFR Part 2: Improvements and New Challenges with the Use and Disclosure of Substance Use Disorder Treatment Records June 20, 2017 Presenters: Adam Greene Rebecca Murow Klein Jennifer Lohse Moderator:
More informationA general review of HIPAA standards and privacy practices 2016
A general review of HIPAA standards and privacy practices 2016 45 CFR, 164 Health Insurance Portability and Accountability Act Treatment, Payment and Healthcare Operations 42 CFR, Part 2, Confidentiality
More informationParental Consent For Minors to Receive Services
Parental Consent For Minors to Receive Services Welcome to the University of San Diego s Wellness Area! We appreciate your coming our way, and look forward to working with you. The following provides important
More informationWilliamson County EMS (WCEMS) HIPAA Training for Third Out Riders
Williamson County EMS (WCEMS) HIPAA Training for Third Out Riders Training Statement: This training program is designed to educate you on WCEMS legal requirements to protect our patients rights and confidentiality,
More informationHIPAA in DPH. HIPAA in the Division of Public Health. February 19, February 19, 2003 Division of Public Health 1
HIPAA in the Division of Public Health February 19, 2003 February 19, 2003 Division of Public Health 1 Handouts HIPAA Definitions AG Advisory Opinion - Definition of Health Plan DPH Coverage Determination
More informationA Better You Counseling Services, LLC 1225 Johnson Ferry Road, Ste 170 Marietta GA
A Better You Counseling Services, LLC 1225 Johnson Ferry Road, Ste 170 Marietta GA 30068 404-216-1135 Health Insurance Portability and Accountability Act (HIPAA) NOTICE OF PRIVACY PRACTICES I. COMMITMENT
More informationStates that Allow Prescribers and/or Dispensers to Appoint a Delegate to Access the PMP
States that Allow Prescribers and/or Dispensers to Appoint a Delegate to Access the PMP Research current through May 2016. This project was supported by Grant No. G1599ONDCP03A, awarded by the Office of
More informationNOTICE OF PRIVACY PRACTICES
Page 1 of 10 NOTICE OF PRIVACY PRACTICES EFFECTIVE DATE: The Notice of Privacy Practices became effective on April 14, 2003 and was amended on August 30, 2013. THIS NOTICE DESCRIBES HOW HEALTH INFORMATION
More informationWhat is HIPAA? Purpose. Health Insurance Portability and Accountability Act of 1996
Patient Privacy and HIPAA/HITECH What is HIPAA? Health Insurance Portability and Accountability Act of 1996 Implemented in 2003 Title II Administrative Simplification It s a federal law HIPAA is mandatory,
More informationRECEIPT OF NOTICE OF PRIVACY PRACTICES WRITTEN ACKNOWLEDGEMENT FORM. I,, have received a copy of Dr. Andy Hand s Notice of Privacy Practice.
Central Texas Institute Of Plastic Surgery, PA Dr. Andy Hand, M.D. Plastic and Reconstructive Surgery Cosmetic Plastic Surgery RECEIPT OF NOTICE OF PRIVACY PRACTICES WRITTEN ACKNOWLEDGEMENT FORM I,, have
More informationalways legally required to follow the privacy practices described in this Notice.
The ANXIETY & STRESS MANAGEMENT INSTITUTE 1640 Powers Ferry Rd, Building 9, Suite 10 0, Marietta, Georgia 30067, 770-953-0080 Health Insurance Portability and Accountability Act (HIPAA) NOTICE OF PRIVACY
More informationFor Payment. We will use and disclose your personal health information to obtain payment for health care services we have provided to you.
NOTICE OF PRIVACY PRACTICES This notice describes how medical information about you may be used and disclosed and how you get access to this information. As a patient of Fast Pace Urgent Care clinic, you
More informationSUMMARY OF THE CIRCUMSTANCES AND PURPOSES FOR WHICH YOUR HEALTH INFORMATION MAY BE USED AND DISCLOSED
374 Hudlow Road, Post Office Box 336 Forest City, NC 28043 Phone: (828) 245-0095 FAX: (828) 248-1035 Toll Free: 1-800-218-CARE (2273) HOSPICE OF RUTHERFORD COUNTY PRIVACY PRACTICES THIS NOTICE DESCRIBES
More informationNOTICE OF PRIVACY PRACTICES Mid-Atlantic Women s Care, PLC Effective Date: September 23, 2013 Last Revised: February 15, 2018
NOTICE OF PRIVACY PRACTICES Mid-Atlantic Women s Care, PLC Effective Date: September 23, 2013 Last Revised: February 15, 2018 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
More informationSouthwest Acupuncture College /PWFNCFS
Southwest Acupuncture College /PWFNCFS This replaces policies in the catalogue and any other documents to date. Boulder Santa Fe TABLE OF CONTENTS STATEMENT OF PURPOSE... 1 I. RIGHT TO A NOTICE OF PRIVACY
More informationJOINT NOTICE OF PRIVACY PRACTICES
JOINT NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. Who Will Follow This Notice PLEASE REVIEW
More informationNew Patient Information
New Patient Information PATIENT INFORMATION M / F Last Name First Name Middle Name Suffix- Jr, Sr, etc. Mr, Mrs, Ms, Dr Sex Date of Birth Social Security Number Alias- Nickname (Last, First, Middle) Permanent
More informationHIPAA Notice of Privacy Practices
HIPAA Notice of Privacy Practices Georgia Mountains Hospice understands that your health information is highly personal and we are committed to safeguarding your privacy. Please read this Notice of Privacy
More informationADVANCED PLASTIC SURGERY, PLLC. NOTICE OF PRIVACY PRACTICES
Effective Date: July 1 st 2013 ADVANCED PLASTIC SURGERY, PLLC. NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO
More informationNOTICE OF PRIVACY PRACTICES MOUNT CARMEL HEALTH SYSTEM
NOTICE OF PRIVACY PRACTICES MOUNT CARMEL HEALTH SYSTEM Effective Date: 9/23/ 2013 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
More informationNOTICE OF PRIVACY PRACTICES Occupations, Inc. 15 Fortune Road West Middletown, NY 10941
NOTICE OF PRIVACY PRACTICES Occupations, Inc. 15 Fortune Road West Middletown, NY 10941 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS
More informationNOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES Effective Date: April 14, 2003 Revised: September 23, 2013 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS
More informationHIPAA PRIVACY TRAINING
HIPAA PRIVACY TRAINING HIPAA Privacy Training Objective Present a general overview of HIPAA and define important terms Understand the purpose of HIPAA and the Privacy Rule Understand the term Protected
More informationSan Francisco Department of Public Health Policy Title: HIPAA Compliance Privacy and the Conduct of Research Page 1 of 10
Page 1 of 10 TITLE: HIPAA COMPLIANCE: PRIVACY AND THE CONDUCT OF RESEARCH POLICY It is the policy of the San Francisco Department of Public Health (DPH) to maintain the privacy of Protected Health Information
More informationAccommodate reasonable requests you may have to communicate health information by alternative means or at alternative locations.
Collom & Carney Clinic Association NOTICE OF PRIVACY PRACTICES Effective Date: April 14, 2003 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS
More informationMSK Group, PC NOTICE O F PRIVACY PRACTICES Effective Date: December 30, 2015
MSK Group, PC NOTICE O F PRIVACY PRACTICES Effective Date: December 30, 2015 This notice describes how medical information about you may be used and disclosed and how you can get access to this information.
More informationInformation Privacy and Security
Information Privacy and Security 2015 Purpose of HIPAA HIPAA stands for the Health Insurance Portability and Accountability Act. Its purpose is to establish nationwide protection of patient confidentiality,
More informationNOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES 1 Effective Date: April 14, 2003 Revision Date: September 23, 2013 Revision Date: January 17, 2018 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
More informationNOTICE OF PRIVACY PRACTICES UNIVERSITY OF CALIFORNIA RIVERSIDE CAMPUS HEALTH CENTER
NOTICE OF PRIVACY PRACTICES UNIVERSITY OF CALIFORNIA RIVERSIDE CAMPUS HEALTH CENTER Effective Date: April 14, 2003 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND
More informationIf you have any questions about this notice, please contact our privacy officer Dr. Jev Sikes at
Notice of Privacy Practices For Deep Eddy Psychotherapy THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT
More informationStates that Allow Prescribers and/or Dispensers to Appoint a Delegate to Access the PMP
States that Allow Prescribers and/or Dispensers to Appoint a Delegate to Access the PMP Research current through December 2014. This project was supported by Grant No. G1399ONDCP03A, awarded by the Office
More informationHIPAA. Health Insurance Portability and Accountability Act. Presented by the UMMC Office of Integrity and Compliance
HIPAA Health Insurance Portability and Accountability Act Presented by the UMMC Office of Integrity and Compliance Rules and Regulations to ensure Privacy Set Federally recognized standards to ensure both
More informationREPORT OF THE BOARD OF TRUSTEES. Protection of Clinician-Patient Privilege (Resolution 237-A-17)
REPORT OF THE BOARD OF TRUSTEES B of T Report 16-A-18 Subject: Presented by: Referred to: Protection of Clinician-Patient Privilege (Resolution 237-A-17) Gerald E. Harmon, MD, Chair Reference Committee
More informationMacon County Mental Health Court. Participant Handbook & Participation Agreement
Macon County Mental Health Court Participant Handbook & Participation Agreement 1 Table of Contents Introduction...3 Program Description.3 Assessment and Enrollment Process....4 Confidentiality..4 Team
More informationBalance Fitness and Nutrition
Balance Fitness and Nutrition HIPPA Notice of Privacy Practices Effective Date: January 29, 2012 THIS NOTICE DESCRIBES HOW PROTECTED HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN
More informationThis notice describes Florida Hospital DeLand s practices and that of: All departments and units of Florida Hospital DeLand.
MRN: FIN: FLORIDA HOSPITAL DELAND HIPAA NOTICE OF PRIVACY PRACTICES Effective Date: September 23, 2013 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN
More informationWAKE FOREST BAPTIST HEALTH NOTICE OF PRIVACY PRACTICES
WAKE FOREST BAPTIST HEALTH NOTICE OF PRIVACY PRACTICES Effective April 14, 2003 Revised February 17, 2010 Revised September 23, 2013 Revised July 1, 2016 This Notice of Privacy Practices applies to the
More informationSlide 1 WHO IS THE CLIENT? WHO CONTROLS THE RECORD? ETHICS AND HIPAA. Slide 2. Slide 3. The Four As of Ethical Practice
Slide 1 WHO CONTROLS THE RECORD? ETHICS AND HIPAA 22 nd Oklahoma Child Abuse & Neglect Conference Norman, Oklahoma, on September 4, 2014 Dr. Arlene B. Schaefer, Ph.D. Forensic and Clinical Psychology Oklahoma
More informationTo ensure proper disclosure and release of Protected Health Information (PHI) Division/Department: All HealthPoint Policy/Procedure #:
TITLE: Release of Medical Records Scope/Purpose: POLICY & PROCEDURE To ensure proper disclosure and release of Protected Health Information (PHI) Division/Department: All HealthPoint Policy/Procedure #:
More informationDO ASK BUT DON T TELL HIPAA PRIVACY RULE
DO ASK BUT DON T TELL HIPAA PRIVACY RULE HITECH/OMNIBUS FINAL RULE HIPAA enacted in 1996; compliance required April 14, 2003 for the Privacy Rule and April 21, 2005 for the Security Rule surrounding electronic
More informationHIPAA Privacy Rule. Best PHI Privacy Practices
HIPAA Privacy Rule Best PHI Privacy Practices Learning Objectives Define the acronym HIPAA. Understand your role and responsibilities under the privacy regulations. Know what patient s rights are in terms
More informationPATIENT RIGHTS TO ACCESS PERSONAL MEDICAL RECORDS California Health & Safety Code Section
PATIENT RIGHTS TO ACCESS PERSONAL MEDICAL RECORDS California Health & Safety Code Section 123100-123149. 123100. The Legislature finds and declares that every person having ultimate responsibility for
More informationFERPA 101. December 4, Michael Hawes Director of Student Privacy Policy U.S. Department of Education
FERPA 101 December 4, 017 Michael Hawes Director of Student Privacy Policy U.S. Department of Education United States Department of Education Privacy Technical Assistance Center The U.S. Department of
More informationMURRAY MEDICAL CENTER HIPAA NOTICE OF PRIVACY PRACTICES
CW CR 618 Exhibit A MURRAY MEDICAL CENTER HIPAA NOTICE OF PRIVACY PRACTICES Effective Date: THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS
More informationERIE COUNTY MEDICAL CENTER CORPORATION NOTICE OF PRIVACY PRACTICES. Effective Date : April 14, 2003 Revised: August 22, 2016
ERIE COUNTY MEDICAL CENTER CORPORATION NOTICE OF PRIVACY PRACTICES Effective Date : April 14, 2003 Revised: August 22, 2016 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
More informationOrthopedic Specialty Clinic, Ltd. Updated 05/2014
Orthopedic Specialty Clinic, Ltd. Updated 05/2014 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
More informationPsychological Services Agreement
John A. Watterson, Ph.D. 4101 Parkstone Heights Drive, Suite 260 Austin, Texas 78746 Phone: 512-306-0663 Fax: 512-306-8086 Website: www.johnwatterson.com Psychological Services Agreement Welcome to my
More informationNOTICE OF PRIVACY PRACTICES UNIVERSITY OF CALIFORNIA IRVINE HEALTHSYSTEM
Effective Date: April 14, 2003 NOTICE OF PRIVACY PRACTICES UNIVERSITY OF CALIFORNIA IRVINE HEALTHSYSTEM THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN
More informationIf you have any questions about this notice, please contact the SSHS Privacy Officer at:
Notice of Privacy Practices 0 Effective Date: April 14, 2003 Revision Date: July 15, 2016 South Shore Health System ( SSHS ) is an integrated health care delivery system. For a list of entities which comprise
More informationNew Mexico Statutes Annotated _Chapter 24. Health and Safety _Article 1. Public Health Act (Refs & Annos) N. M. S. A. 1978,
N. M. S. A. 1978, 24-1-1 24-1-1. Short title Chapter 24, Article 1 NMSA 1978 may be cited as the Public Health Act. N. M. S. A. 1978, 24-1-2 24-1-2. Definitions Effective: June 15, 2007 As used in the
More informationIt defines basic terms and lists basic principles that all LSUHSC-NO faculty, staff, residents and students must understand and follow.
Office of Compliance Programs Revised: July 18, 2017 HIPAA Privacy HIPAA Privacy Workforce Training The Health Insurance Portability & Accountability Act (HIPAA) requires that the University train all
More informationSan Francisco Department of Public Health
San Francisco Department of Public Health Barbara A. Garcia, MPA Director of Health City and County of San Francisco Edwin M. Lee, Mayor San Francisco Department of Public Health Policy & Procedure Detail*
More informationHIPAA NOTICE OF PRIVACY PRACTICES
JULIE A THOMAS, M.D. NEDRA L RICE, M.D. SHAHEEN K. JACOB, M.D. MARY ANN FRANKEN, M.D. MAHNAZ MOSTOFI, WHNP HIPAA NOTICE OF PRIVACY PRACTICES As Required by the Privacy Regulations Created as a Result of
More informationHIPAA-HITECH HELPBOOK NJ Physician Practices
NOTICE OF PRIVACY PRACTICES Montgomery Medical Associates LLC Effective Date: 04/01/13 Version 2 SUMMARY WHAT IS THIS NOTICE FOR? This Notice of Privacy Practices (Notice) describes how Montgomery Medical
More informationPATIENT NOTICE OF PRIVACY PRACTICES Effective Date: June 1, 2012 Updated: May 9, 2017
PREMIER PSYCHIATRY Psychiatric and Behavioral Health Services PATIENT NOTICE OF PRIVACY PRACTICES Effective Date: June 1, 2012 Updated: May 9, 2017 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU
More informationHIPAA Notice of Privacy Practices DFD Russell Medical Center Effective April 14, 2003 Updated April 10, 2013
HIPAA Notice of Privacy Practices DFD Russell Medical Center Effective April 14, 2003 Updated April 10, 2013 This notice describes how information about you may be used and disclosed and how you can get
More informationCompliance with Personal Health Information Protection Act
Compliance with Personal Health Information Protection Act Ontario s Personal Health Information & Protection Act (PHIPA) governs the collection, use and disclosure of personal health information by midwives
More informationHealth Information Privacy Policies and Procedures
University of the Pacific Arthur A. Dugoni School of Dentistry Health Information Privacy Policies and s These Health Information Privacy Policies & s implement our obligations to protect the privacy of
More informationProtecting Health Information: Health Data Security Training
Protecting Health Information: Health Data Security Training How to secure patient information and manage your obligations under HIPAA, the HITECH Act and other federal and state data privacy and security
More informationOpp Health and Rehabilitation, LLC 115 Paulk Avenue P.O. Box 730 Opp, AL Phone Number: (334)
Opp Health and Rehabilitation, LLC 115 Paulk Avenue P.O. Box 730 Opp, AL 36467-1695 Phone Number: (334) 493-4558 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW
More informationI. Preamble: II. Parties:
I. Preamble: MEMORANDUM OF UNDERSTANDING BETWEEN THE FEDERAL COMMUNICATIONS COMMISSION AND THE FOOD AND DRUG ADMINISTRATION CENTER FOR DEVICES AND RADIOLOGICAL HEALTH The Food and Drug Administration (FDA)
More informationVHA Privacy Policy Training FY VHA Privacy Office
VHA Privacy Policy Training Applicable Confidentiality Statutes and Regulations The following legal provisions govern the collection, use, maintenance, and disclosure of information from VHA records. The
More informationCOMPLAINT FORM CONSENT AND RELEASE
COMPLAINT FORM CONSENT AND RELEASE This form must be completed whenever the BACB investigates a complaint that involves the provision of services to an adult, legal minor and/or incapacitated individual
More informationPatient Consent Form
Alexander Raskin, M.D., Q.M.E. Assistant Clinical Professor UCLA School of Medicine ORTHOPEDIC SURGERY SPORTS MEDICINE ARTHROSCOPY 16311 Ventura Blvd., Suite 1150, Encino, CA 91436 T (818) 788-ORTHO (6784)
More informationNOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES 1 Effective Date: April 14, 2003 Revised: September 23, 2013 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO
More informationNotice of Privacy Practices
Notice of Privacy Practices Effective September 23, 2013 TCHC.org An equal opportunity employer and provider. CLINICS Baxter Bertha Henning Ottertail Sebeka Verndale Wadena HOSPITAL Wadena 415 Jefferson
More information.. Policy and Procedure Policy name: HIPAA: Privacy Notice Policy Policy number: 180-00-05 Proponent: Director of Quality and Compliance Mind Springs Asset Management, Company: LLC West Springs Hospital,
More informationSANTA RITA CARE CENTER Notice of Information Practices
SANTA RITA CARE CENTER Notice of Information Practices THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT
More information