25
edits
Use and Disclosure of Protected Health Information: Difference between revisions
Jump to navigation
Jump to search
Use and Disclosure of Protected Health Information (view source)
Revision as of 08:34, June 24, 2013
, June 24, 2013no edit summary
No edit summary |
No edit summary |
||
| Line 221: | Line 221: | ||
The recipient of the limited data set must enter into a data use agreement. If a limited data set recipient breaches the data use agreement, UNMC shall take reasonable steps to cure the breach or end the violation, and if such steps are unsuccessful, shall discontinue disclosure of PHI to the limited data set recipient. | The recipient of the limited data set must enter into a data use agreement. If a limited data set recipient breaches the data use agreement, UNMC shall take reasonable steps to cure the breach or end the violation, and if such steps are unsuccessful, shall discontinue disclosure of PHI to the limited data set recipient. | ||
===De-Identification /Re-Identification of PHI (164.514)=== | |||
'''De-Identification of PHI.''' PHI may be used to create information that is not individually identifiable health information (de-identified). The HIPAA privacy rules do not apply to information that does not identify an individual and with respect to which there is no reasonable basis to believe that the information can be used to identify an individual. PPHI is de-identified when 18 identifiers of the individual or of relatives, employers or household members of the individual are removed and the organization does not have actual knowledge that the information could be used alone or in combination with other information to identify an individual who is the subject of the information. The identifiers are: | |||
:#Names | |||
:#All geographic subdivisions smaller than a state | |||
:#All elements of dates except year, for dates related to individual | |||
:#Telephone numbers | |||
:#Fax numbers | |||
:#Electronic mail addresses | |||
:#Social security numbers | |||
:#Medical record numbers | |||
:#Health plan beneficiary numbers | |||
:#Accounts numbers | |||
:#Certificate/license numbers | |||
:#Vehicle identifiers and serial numbers | |||
:#Web Universal Resource Locators (URLs) | |||
:#Internet Protocol (IP) address numbers | |||
:#Biometric identifiers, including finger and voice prints | |||
:#Full face photographic images and other comparable images and | |||
:#Any other unique identifying number, characteristic/code, except as permitted under the Re-identification section below | |||
This page | '''Re-Identification of PHI.''' A code or other means of record identification may be assigned to allow information de-identified under VIIA about to be re-identified by UNMC, provided that: | ||
:#The code or other means of record identification is not derived from or related to information about the individual and is not otherwise capable of being translated so as to identify the individual; and | |||
:#The code or other means of record identification is not used for other purposes and the mechanism for re-identification is not disclosed. | |||
==Staff Accountability== | |||
[mailto:swrobel@unmc.edu Privacy Officer] | |||
This page is maintained by [mailto:dpanowic@unmc.edu dkp]. | |||