1,735
edits
Mhurlocker (talk | contribs) No edit summary |
(→Additional Information: updated Health Insurance Portability and Accountability Act of 1996 link 2x and HIPAA Security Rule link) |
||
| Line 35: | Line 35: | ||
<big>'''Access and Amendment of Designated Record Set Policy'''</big> | <big>'''Access and Amendment of Designated Record Set Policy'''</big> | ||
==Basis for Policy == | ==Basis for Policy == | ||
Nebraska Medicine/UNMC implements reasonable and appropriate access controls in alignment with National Institute of Standards and Technology (NIST) standards and guidance to maintain the minimum necessary access. [https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST Special Publication 800-53] and the [https://www.cdc.gov/phlp/ | Nebraska Medicine/UNMC implements reasonable and appropriate access controls in alignment with National Institute of Standards and Technology (NIST) standards and guidance to maintain the minimum necessary access. [https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST Special Publication 800-53] and the [https://www.cdc.gov/phlp/php/resources/health-insurance-portability-and-accountability-act-of-1996-hipaa.html HIPAA Security Rule] outline considerations for the access control family of security controls. | ||
== Policy == | == Policy == | ||
It is the policy of Nebraska Medicine/UNMC to comply with the procedures set forth below.<br /> | It is the policy of Nebraska Medicine/UNMC to comply with the procedures set forth below.<br /> | ||
Nebraska Medicine/UNMC shall provide Individuals access to inspect and obtain a copy of Protected Health Information (PHI) contained in the Designated Record Set (DRS) maintained by Nebraska Medicine/UNMC or its business associates, and to request amendment to such information, in accordance with the [https://www.cdc.gov/phlp/ | Nebraska Medicine/UNMC shall provide Individuals access to inspect and obtain a copy of Protected Health Information (PHI) contained in the Designated Record Set (DRS) maintained by Nebraska Medicine/UNMC or its business associates, and to request amendment to such information, in accordance with the [https://www.cdc.gov/phlp/php/resources/health-insurance-portability-and-accountability-act-of-1996-hipaa.html Health Insurance Portability and Accountability Act of 1996 (HIPAA)]. | ||
==Purpose== | ==Purpose== | ||
To establish guidelines for individual access to and request for amendment of Protected Health Information (PHI) contained in the Designated Record Set (DRS). | To establish guidelines for individual access to and request for amendment of Protected Health Information (PHI) contained in the Designated Record Set (DRS). | ||
| Line 136: | Line 136: | ||
*Nebraska Medicine Consents and Permits policy, MS14. | *Nebraska Medicine Consents and Permits policy, MS14. | ||
*Nebraska Medicine’s One Chart | Patient (Electronic Health Record Portal) policy, IM45 | *Nebraska Medicine’s One Chart | Patient (Electronic Health Record Portal) policy, IM45 | ||
*[https://www.cdc.gov/phlp/ | *[https://www.cdc.gov/phlp/php/resources/health-insurance-portability-and-accountability-act-of-1996-hipaa.html Health Insurance Portability and Accountability Act of 1996 (HIPAA)] | ||
*[https://www.justice.gov/opcl/overview-privacy-act-1974-2020-edition Privacy Act, 5 U.S.C. § 552(a)] | *[https://www.justice.gov/opcl/overview-privacy-act-1974-2020-edition Privacy Act, 5 U.S.C. § 552(a)] | ||
*[https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a] | *[https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a] | ||