3. For law enforcement purposes; 4. For public health activities; 5. For health oversight activities about decedents; 6. For cadaveric organ, eye, or tissue donation purposes; 7. For certain limited research purposes; 8. To avert a serious threat to health or safety; 9. For specialized government functions; and 10. That related to workers’ compensation programs. Disclosures of PHI Pursuant to an Authorization
PHI may be disclosed for any purpose if the participant provides an authorization. All uses and disclosures made pursuant to a signed authorization must be consistent with the terms and conditions of the authorization. Complying with the “Minimum-Necessary” Standard: When PHI is used or disclosed, the amount disclosed generally must be limited to the “minimum necessary” to accomplish the purpose of the use or disclosure 1. The “minimum necessary” standard does not apply to any of the following: 2. Uses or disclosures made to the individual;
3. Uses or disclosures made pursuant to a valid authorization; 4. Disclosures made to the Department of Labor (DOPL); 5. Uses or disclosures required by law; and 6. Uses or disclosures required to comply with HIPAA.
All other disclosures must be reviewed on an individual basis with the Privacy Official to ensure that the amount of information disclosed is the minimum necessary to accomplish the purposes of the disclosure. Disclosures of PHI to Business Associates 1. PHI may be disclosed to the Plan’s business associates and allow the Plan’s business associates to create or receive PHI on its behalf. However, prior to doing so, the Plan must first obtain assurances from the business associate that it will appropriately safeguard the information. a. Business Associate is an entity that: b. Performs or assists in performing a Plan function or activity involving the use and disclosure of protected health information, including claims processing or administration, data analysis, underwriting, etc. c. Provides legal, accounting, actuarial, consulting, data aggregation, management, accreditation, or financial services, where the performance of such services involves giving the service provider access to PHI.
Made with FlippingBook flipbook maker