Access to Designated Record Set - Revision history

Afaylor: /* Additional Information */ updated Health Insurance Portability and Accountability Act of 1996 link 2x and HIPAA Security Rule link

2025-09-29T19:35:02Z

Additional Information: updated Health Insurance Portability and Accountability Act of 1996 link 2x and HIPAA Security Rule link

Mhurlocker at 15:06, July 9, 2024

2024-07-09T15:06:17Z

Mhurlocker at 14:44, July 9, 2024

2024-07-09T14:44:44Z

← Older revision		Revision as of 09:44, July 9, 2024
Line 30:		Line 30:
	Policy No.: '''6059'''<br />		Policy No.: '''6059'''<br />
	Effective Date: '''03/17/03'''<br />		Effective Date: '''03/17/03'''<br />
	Revised Date: '''10/28/~~22 Draft~~'''<br />		Revised Date: '''06/06/24'''<br />
	Reviewed Date:<br />		Reviewed Date: '''06/06/24'''<br />

	<big>'''Access and Amendment of Designated Record Set Policy'''</big>		<big>'''Access and Amendment of Designated Record Set Policy'''</big>

Mhurlocker: /* Affiliated Covered Entity (ACE) */

2023-08-15T18:29:08Z

Affiliated Covered Entity (ACE)

← Older revision		Revision as of 13:29, August 15, 2023
Line 105:		Line 105:
	==Definitions==		==Definitions==
	===Affiliated Covered Entity (ACE)===		===Affiliated Covered Entity (ACE)===
	Legally separate covered entities that ~~are affiliated and~~ designate themselves as a single covered entity for the purpose of HIPAA Compliance. Current ACE members are: The Nebraska Medical Center, UNMC Physicians, UNMC, University Dental Associates, Bellevue Medical Center and Nebraska Pediatric Practice, Inc. d/b/a Children’s Specialty Physicians. ACE membership may change from time to time. The Notice of Privacy Practices lists current ACE members~~. Access and amendment rights apply to designated record sets throughout the ACE~~.		Legally separate covered entities that designate themselves as a single covered entity for the purpose of HIPAA Compliance. Current ACE members are: The Nebraska Medical Center, UNMC Physicians, UNMC, University Dental Associates, Bellevue Medical Center and Nebraska Pediatric Practice, Inc. d/b/a Children’s Specialty Physicians. ACE membership may change from time to time. The Notice of Privacy Practices lists current ACE members.

	===Designated Record Set (DRS)===		===Designated Record Set (DRS)===
	Includes medical records and billing records about Individuals maintained by or for UNMC/ACE and any other record used by an ACE ~~entity~~ to make decisions about Individuals. ~~Exact duplicates of records maintained by business associates are not considered part of the DRS.~~		Includes medical records and billing records about Individuals maintained by or for UNMC/ACE and any other record used by the ACE to make decisions about Individuals.
	===Individual===		===Individual===
	The person who is the subject of the PHI. Personal representatives of the Individual have the same rights as the Individual under HIPAA (i.e., they “step into the shoes” of the Individual). Personal representatives include the legal guardian and anyone else authorized by law to act on behalf of the Individual. (See Nebraska Medicine Consents and Permits policy, MS14.)		The person who is the subject of the PHI. Personal representatives of the Individual have the same rights as the Individual under HIPAA (i.e., they “step into the shoes” of the Individual). Personal representatives include the legal guardian and anyone else authorized by law to act on behalf of the Individual. (See Nebraska Medicine Consents and Permits policy, MS14.)
Line 118:		Line 118:
	*an Individual’s genetic tests;		*an Individual’s genetic tests;
	*the genetic tests of an Individual’s family members; or		*the genetic tests of an Individual’s family members; or
	*the manifestation of a disease or disorder in such Individual’s family members (i.e., family medical history)~~; or~~		*the manifestation of a disease or disorder in such Individual’s family members (i.e., family medical history).
	*any request for, or receipt of, genetic services (e.g., genetic test, genetic counseling, genetic education), or participation in clinical research which includes genetic services by the Individual or any family member of the Individual.
	PHI excludes:		PHI excludes:
	*individually identifiable health information of a person who has been deceased for more than fifty (50) years.		*individually identifiable health information of a person who has been deceased for more than fifty (50) years.

Dpanowic at 14:41, October 28, 2022

2022-10-28T14:41:29Z

← Older revision		Revision as of 09:41, October 28, 2022
Line 30:		Line 30:
	Policy No.: '''6059'''<br />		Policy No.: '''6059'''<br />
	Effective Date: '''03/17/03'''<br />		Effective Date: '''03/17/03'''<br />
	Revised Date: '''09/20/22 Draft'''<br />		Revised Date: '''10/28/22 Draft'''<br />
	Reviewed Date:<br />		Reviewed Date:<br />

Line 125:		Line 125:
	*employment records held by UNMC in its role as employer.		*employment records held by UNMC in its role as employer.
	===Psychotherapy Notes===		===Psychotherapy Notes===
	Notes recorded (in any medium) by a ~~licensed~~ mental health ~~practitioner (LMHP)~~ documenting or analyzing the contents of a conversation during a private counseling session or group, joint or family counseling session. Psychotherapy notes are kept separate from the ~~Individual's~~ medical record. ~~Psychotherapy notes are sometimes referred to as "process notes."~~ Psychotherapy notes exclude medication prescription and monitoring, counseling session start and stop times, the modalities and frequencies of treatment furnished, results of clinical tests and any summary of the following items: diagnosis, functional status, the treatment plan, symptoms, prognosis and progress. Psychotherapy notes are not progress notes.		Notes recorded (in any medium) by a mental health provider including psychiatrists, psychologists and other mental health professionals documenting or analyzing the contents of a conversation during a private counseling session or group, joint or family counseling session. Psychotherapy notes are kept separate from the rest of the individual’s medical record. Psychotherapy notes exclude medication prescription and monitoring, counseling session start and stop times, the modalities and frequencies of treatment furnished, results of clinical tests and any summary of the following items: diagnosis, functional status, the treatment plan, symptoms, prognosis and progress to date. Psychotherapy notes are not progress notes and are created at the discretion of the mental health care provider. (HIPAA: 45 CFR §164.501)
	==Additional Information==		==Additional Information==
	*Contact [mailto:privacy@nebraskamed.com Privacy Officer]		*Contact [mailto:privacy@nebraskamed.com Privacy Officer]

Dpanowic: /* Affiliated Covered Entity (ACE) */

2022-09-26T17:10:09Z

Affiliated Covered Entity (ACE)

← Older revision		Revision as of 12:10, September 26, 2022
Line 105:		Line 105:
	==Definitions==		==Definitions==
	===Affiliated Covered Entity (ACE)===		===Affiliated Covered Entity (ACE)===
	Legally separate covered entities that designate themselves as a single covered entity for the purpose of HIPAA Compliance. Current ACE members are: The Nebraska Medical Center, UNMC Physicians, UNMC, University Dental Associates, Bellevue Medical Center and Nebraska Pediatric Practice, Inc. d/b/a Children’s Specialty Physicians. ACE membership may change from time to time. The Notice of Privacy Practices lists current ACE members. Access and amendment rights apply to designated record sets throughout the ACE.		Legally separate covered entities that are affiliated and designate themselves as a single covered entity for the purpose of HIPAA Compliance. Current ACE members are: The Nebraska Medical Center, UNMC Physicians, UNMC, University Dental Associates, Bellevue Medical Center and Nebraska Pediatric Practice, Inc. d/b/a Children’s Specialty Physicians. ACE membership may change from time to time. The Notice of Privacy Practices lists current ACE members. Access and amendment rights apply to designated record sets throughout the ACE.

	===Designated Record Set (DRS)===		===Designated Record Set (DRS)===
	Includes medical records and billing records about Individuals maintained by or for UNMC/ACE and any other record used by an ACE entity to make decisions about Individuals. Exact duplicates of records maintained by business associates are not considered part of the DRS.		Includes medical records and billing records about Individuals maintained by or for UNMC/ACE and any other record used by an ACE entity to make decisions about Individuals. Exact duplicates of records maintained by business associates are not considered part of the DRS.

Dpanowic at 20:30, September 21, 2022

2022-09-21T20:30:42Z

Dpanowic at 16:01, September 20, 2022

2022-09-20T16:01:24Z

Dpanowic at 20:58, September 13, 2022

2022-09-13T20:58:41Z

← Older revision		Revision as of 15:58, September 13, 2022
Line 41:		Line 41:
	Nebraska Medicine/UNMC shall provide Individuals access to inspect and obtain a copy of Protected Health Information (PHI) contained in the Designated Record Set (DRS) maintained by Nebraska Medicine/UNMC or its business associates, and to request amendment to such information, in accordance with the [https://www.cdc.gov/phlp/publications/topic/hipaa.html Health Insurance Portability and Accountability Act of 1996 (HIPAA)].		Nebraska Medicine/UNMC shall provide Individuals access to inspect and obtain a copy of Protected Health Information (PHI) contained in the Designated Record Set (DRS) maintained by Nebraska Medicine/UNMC or its business associates, and to request amendment to such information, in accordance with the [https://www.cdc.gov/phlp/publications/topic/hipaa.html Health Insurance Portability and Accountability Act of 1996 (HIPAA)].
	==Purpose==		==Purpose==
	To establish guidelines for individual access to and request for amendment of Protected Health Information (PHI) contained in the Designated Record Set.		To establish guidelines for individual access to and request for amendment of Protected Health Information (PHI) contained in the Designated Record Set (DRS).
	==Procedures==		==Procedures==
	===Records Designated as Designated Records Set ~~(DRS)~~===		===Records Designated as Designated Records Set===
	#Nebraska Medicine/UNMC designates the following records as its ~~designated record set~~:		Nebraska Medicine/UNMC designates the following records as its DRS:
	##'''Legal Medical Record'''. The Health Information Management Department (HIM) shall manage access to and amendment of the Legal Medical Record. Contents of the Legal Medical Record shall be approved by the Clinical Governance Committee.		#'''Legal Medical Record'''. The Health Information Management Department (HIM) shall manage access to and amendment of the Legal Medical Record. Contents of the Legal Medical Record shall be approved by the Clinical Governance Committee.
	#'''Billing Records'''. The DRS billing record includes all of the data elements required on the [ CMS-1500 form] or [ Health Care Financing Administration claim form (HCFA)]. The contents shall be approved by the Nebraska Medicine Chief Financial Officer for UNMC clinical operations using One Chart for patient care.		#'''Billing Records'''. The DRS billing record includes all of the data elements required on the [ CMS-1500 form] or [ Health Care Financing Administration claim form (HCFA)]. The contents shall be approved by the Nebraska Medicine Chief Financial Officer for UNMC clinical operations using One Chart for patient care.
	#Any other record used in whole or in part by or for the covered entity to make decisions about Individuals.		#Any other record used in whole or in part by or for the covered entity to make decisions about Individuals.

Dpanowic at 21:07, September 9, 2022

2022-09-09T21:07:38Z

← Older revision		Revision as of 14:35, September 29, 2025
Line 35:		Line 35:
	<big>'''Access and Amendment of Designated Record Set Policy'''</big>		<big>'''Access and Amendment of Designated Record Set Policy'''</big>
	==Basis for Policy ==		==Basis for Policy ==
	Nebraska Medicine/UNMC implements reasonable and appropriate access controls in alignment with National Institute of Standards and Technology (NIST) standards and guidance to maintain the minimum necessary access. [https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST Special Publication 800-53] and the [https://www.cdc.gov/phlp/~~publications~~/~~topic~~/hipaa.html~~#security-rule~~ HIPAA Security Rule] outline considerations for the access control family of security controls.		Nebraska Medicine/UNMC implements reasonable and appropriate access controls in alignment with National Institute of Standards and Technology (NIST) standards and guidance to maintain the minimum necessary access. [https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final NIST Special Publication 800-53] and the [https://www.cdc.gov/phlp/php/resources/health-insurance-portability-and-accountability-act-of-1996-hipaa.html HIPAA Security Rule] outline considerations for the access control family of security controls.
	== Policy ==		== Policy ==
	It is the policy of Nebraska Medicine/UNMC to comply with the procedures set forth below.<br />		It is the policy of Nebraska Medicine/UNMC to comply with the procedures set forth below.<br />

	Nebraska Medicine/UNMC shall provide Individuals access to inspect and obtain a copy of Protected Health Information (PHI) contained in the Designated Record Set (DRS) maintained by Nebraska Medicine/UNMC or its business associates, and to request amendment to such information, in accordance with the [https://www.cdc.gov/phlp/~~publications~~/~~topic~~/hipaa.html Health Insurance Portability and Accountability Act of 1996 (HIPAA)].		Nebraska Medicine/UNMC shall provide Individuals access to inspect and obtain a copy of Protected Health Information (PHI) contained in the Designated Record Set (DRS) maintained by Nebraska Medicine/UNMC or its business associates, and to request amendment to such information, in accordance with the [https://www.cdc.gov/phlp/php/resources/health-insurance-portability-and-accountability-act-of-1996-hipaa.html Health Insurance Portability and Accountability Act of 1996 (HIPAA)].
	==Purpose==		==Purpose==
	To establish guidelines for individual access to and request for amendment of Protected Health Information (PHI) contained in the Designated Record Set (DRS).		To establish guidelines for individual access to and request for amendment of Protected Health Information (PHI) contained in the Designated Record Set (DRS).
Line 136:		Line 136:
	*Nebraska Medicine Consents and Permits policy, MS14.		*Nebraska Medicine Consents and Permits policy, MS14.
	*Nebraska Medicine’s One Chart \| Patient (Electronic Health Record Portal) policy, IM45		*Nebraska Medicine’s One Chart \| Patient (Electronic Health Record Portal) policy, IM45
	*[https://www.cdc.gov/phlp/~~publications~~/~~topic~~/hipaa.html Health Insurance Portability and Accountability Act of 1996 (HIPAA)]		*[https://www.cdc.gov/phlp/php/resources/health-insurance-portability-and-accountability-act-of-1996-hipaa.html Health Insurance Portability and Accountability Act of 1996 (HIPAA)]
	*[https://www.justice.gov/opcl/overview-privacy-act-1974-2020-edition Privacy Act, 5 U.S.C. § 552(a)]		*[https://www.justice.gov/opcl/overview-privacy-act-1974-2020-edition Privacy Act, 5 U.S.C. § 552(a)]
	*[https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a]		*[https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a]

← Older revision		Revision as of 10:06, July 9, 2024
Line 46:		Line 46:
	Nebraska Medicine/UNMC designates the following records as its DRS:		Nebraska Medicine/UNMC designates the following records as its DRS:
	#'''Legal Medical Record'''. The Health Information Management Department (HIM) shall manage access to and amendment of the Legal Medical Record. Contents of the Legal Medical Record shall be approved by the Clinical Governance Committee.		#'''Legal Medical Record'''. The Health Information Management Department (HIM) shall manage access to and amendment of the Legal Medical Record. Contents of the Legal Medical Record shall be approved by the Clinical Governance Committee.
	#'''Billing Records'''. The DRS billing record includes all of the data elements required on the [ CMS-1500 form] ~~'''(~~ form ~~name and URL please)'''~~ or [ Health Care Financing Administration claim form (HCFA)] ~~'''(URL please)'''~~. The contents shall be approved by the Nebraska Medicine Chief Financial Officer for UNMC clinical operations using One Chart for patient care.		#'''Billing Records'''. The DRS billing record includes all of the data elements required on the [ CMS-1500 form] https://cms-1500-claim-form.com or [ [https://cms-1500-claim-form.comHealth Care Financing Administration claim form Health Care Financing Administration claim form] (HCFA)]. The contents shall be approved by the Nebraska Medicine Chief Financial Officer for UNMC clinical operations using One Chart for patient care.
	#Any other record used in whole or in part by or for the covered entity to make decisions about Individuals.		#Any other record used in whole or in part by or for the covered entity to make decisions about Individuals.
	===Access to the Designated Record Set===		===Access to the Designated Record Set===
	#Individuals have the right to inspect and obtain a copy of PHI about the Individual in their DRS for as long as the PHI is maintained in the DRS, subject to the limitations in Sections 13 and 14 below.		#Individuals have the right to inspect and obtain a copy of PHI about the Individual in their DRS for as long as the PHI is maintained in the DRS, subject to the limitations in Sections 13 and 14 below.
	#If the same record that is the subject of the request is maintained in more than one DRS or at more than one location, the department need only produce the record once in response to a request for access.		#If the same record that is the subject of the request is maintained in more than one DRS or at more than one location, the department need only produce the record once in response to a request for access.
	#'''Initiating a Request'''. Individuals shall complete a [Patient Access Request form ~~(not yet approved)]~~ to inspect and/or obtain a copy of the DRS, and submit it to HIM. HIM is responsible for the processing of all such requests. ~~If the~~ Individual ~~completes an~~ '''[~~Authorization for Release of Information Form, CON MR 0074~~] ~~please advise (URL)~~'''and the recipient is the Individual or a third party designated by the Individual, this will be treated as a request for access.		#'''Initiating a Request'''. Individuals shall complete a Patient Access Request form to inspect and/or obtain a copy of the DRS, and submit it to HIM. HIM is responsible for the processing of all such requests. An Individual can request '''Patient Access at [mailto:Privacy@NebraskaMed.com Privacy@NebraskaMed.com]''' and the recipient is the Individual or a third party designated by the Individual, this will be treated as a request for access.
	#'''Review for Completeness'''. When a Patient Access Request or Authorization for Release of Information form is received, HIM shall review the form for completion. If any information is incomplete that is necessary for an access request ('''NOTE:''' some information on the Authorization for Release of Information is not necessary for a request for access), HIM will notify the Individual that they cannot process the incomplete request. HIM should document on the form the attempts to contact the Individual.		#'''Review for Completeness'''. When a Patient Access Request or Authorization for Release of Information form is received, HIM shall review the form for completion. If any information is incomplete that is necessary for an access request ('''NOTE:''' some information on the Authorization for Release of Information is not necessary for a request for access), HIM will notify the Individual that they cannot process the incomplete request. HIM should document on the form the attempts to contact the Individual.
	#'''Timeframe for Response.'''		#'''Timeframe for Response.'''
Line 66:		Line 66:
	#If the Individual requests in advance an explanation or summary of the information and agrees to pay the fee for preparing the summary, HIM shall prepare the summary and provide it to the Individual.		#If the Individual requests in advance an explanation or summary of the information and agrees to pay the fee for preparing the summary, HIM shall prepare the summary and provide it to the Individual.
	#The Individual will be notified when the records are available for inspection or that a copy is available for pick-up or mailing/e-mailing. The total cost to the Individual for producing and mailing/e-mailing a copy should be included. Payment for copying/mailing/e-mailing the requested records will be collected prior to the time the records are released. Individuals generally have access to their own medical information during and after treatment via the One Chart \| PATIENT portal. The One Chart \| PATIENT portal is a secure online application that allows Individuals to view portions of their medical and billing record. Individuals may give others proxy access to their portal account. Parents may obtain limited proxy access to the records of their children. Reference Nebraska Medicine’s One Chart \| Patient (Electronic Health Record Portal) policy, IM45, for current information on eligibility for patient and proxy access.		#The Individual will be notified when the records are available for inspection or that a copy is available for pick-up or mailing/e-mailing. The total cost to the Individual for producing and mailing/e-mailing a copy should be included. Payment for copying/mailing/e-mailing the requested records will be collected prior to the time the records are released. Individuals generally have access to their own medical information during and after treatment via the One Chart \| PATIENT portal. The One Chart \| PATIENT portal is a secure online application that allows Individuals to view portions of their medical and billing record. Individuals may give others proxy access to their portal account. Parents may obtain limited proxy access to the records of their children. Reference Nebraska Medicine’s One Chart \| Patient (Electronic Health Record Portal) policy, IM45, for current information on eligibility for patient and proxy access.
	#'''Denials of Access'''. HIM should review the request to determine if one or more of the following grounds for denying access exists as to all or part of the requested records. Access may be denied, in coordination with HIM and the Privacy Office, for reasons listed under Sections 13 and 14 below. The Individual must be provided with a written denial, including the basis for denial; a statement of their review rights under n below if applicable; and a description of how the Individual may file a complaint to Nebraska Medicine/UNMC, along with name, title, and telephone number, or to the Secretary Health and Human Services '''~~(see [~~ Denial of Access to Medical Record/Billing Record]) . If Nebraska Medicine/UNMC does not maintain the PHI that is the subject of the Individual's request for access and knows where the requested information is maintained, Nebraska Medicine/UNMC will inform the Individual where to direct the request for access.		#'''Denials of Access'''. HIM should review the request to determine if one or more of the following grounds for denying access exists as to all or part of the requested records. Access may be denied, in coordination with HIM and the Privacy Office, for reasons listed under Sections 13 and 14 below. The Individual must be provided with a written denial, including the basis for denial; a statement of their review rights under n below if applicable; and a description of how the Individual may file a complaint to Nebraska Medicine/UNMC, along with name, title, and telephone number, or to the Secretary Health and Human Services '''Denial of Access to Medical Record/Billing Record is created by HIM on an as-needed basis. If Nebraska Medicine/UNMC does not maintain the PHI that is the subject of the Individual's request for access and knows where the requested information is maintained, Nebraska Medicine/UNMC will inform the Individual where to direct the request for access.'''
	#'''Unreviewable Grounds for Denial of Access'''. HIM, in coordination with the Privacy Office, may deny the Individual the right to access their DRS for reasons listed below without providing the Individual with an opportunity for review.		#'''Unreviewable Grounds for Denial of Access'''. HIM, in coordination with the Privacy Office, may deny the Individual the right to access their DRS for reasons listed below without providing the Individual with an opportunity for review.
	#*The information requested is not maintained by Nebraska Medicine/UNMC. If HIM knows where such information is maintained, the location should be noted in our response to the Individual;		#*The information requested is not maintained by Nebraska Medicine/UNMC. If HIM knows where such information is maintained, the location should be noted in our response to the Individual;
Line 84:		Line 84:
	===Amendment of Designated Record===		===Amendment of Designated Record===
	Individuals have the right to request amendment of PHI about them which is maintained by Nebraska Medicine/UNMC or its business associates in the DRS. Nebraska Medicine/UNMC shall receive and process such requests according to the following procedures:		Individuals have the right to request amendment of PHI about them which is maintained by Nebraska Medicine/UNMC or its business associates in the DRS. Nebraska Medicine/UNMC shall receive and process such requests according to the following procedures:
	#Individuals may submit a written Request for [Correction/Amendment of Medical/Billing Information form] ~~'''(URL please)'''~~ to HIM, providing rationale for the requested amendment.		#Individuals may submit a written Request for [mailto:Privacy@NebraskaMed.com Correction/Amendment of Medical/Billing Information form] to HIM, providing rationale for the requested amendment.
	#*HIM will review the form for completion. If any information is incomplete, HIM will notify the Individual that Nebraska Medicine/UNMC cannot process the incomplete request. HIM will document on the Request form the attempts to contact the Individual.		#*HIM will review the form for completion. If any information is incomplete, HIM will notify the Individual that Nebraska Medicine/UNMC cannot process the incomplete request. HIM will document on the Request form the attempts to contact the Individual.
	#*HIM shall contact the author of clinical PHI to approve/deny the requested amendment. If the author is a medical student, resident or allied health professional with a supervising physician, the supervising physician shall approve/deny the requested amendment. If the request involves billing or payment information, Patient Financial Services should be consulted.		#*HIM shall contact the author of clinical PHI to approve/deny the requested amendment. If the author is a medical student, resident or allied health professional with a supervising physician, the supervising physician shall approve/deny the requested amendment. If the request involves billing or payment information, Patient Financial Services should be consulted.
Line 140:		Line 140:
	*[https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a]		*[https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a]
	*[https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493 Clinical Laboratory Improvements Amendments of 1988, 42 C.F.R. § 493]		*[https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493 Clinical Laboratory Improvements Amendments of 1988, 42 C.F.R. § 493]
	*[ CMS-1500 form] ~~'''( form name and URL please)'''~~		*[https://cms-1500-claim-form.com CMS-1500 form]
	*[ Health Care Financing Administration claim form ~~(HCFA)~~] ~~'''(URL please)'''~~		*[https://cms-1500-claim-form.com Health Care Financing Administration claim form]
	*[Patient Access Request form~~] (not yet approved)~~		*Patient Access Request form
	*[Authorization for Release of Information Form, CON MR 0074]		*Authorization for Release of Information Form, CON MR 0074
	*[ Denial of Access to Medical Record/Billing Record]		*Denial of Access to Medical Record/Billing Record
	*[ Correction/Amendment of Medical/Billing Information form] ~~'''(URL please)''' it would help if this was a separate URL from the denial of access to medical record when it was saved on your web site~~		*[mailto:Privacy@unmc.edu Correction/Amendment of Medical/Billing Information form]
	*[ Notice of Approved/Denied Request for Amendment form ] ~~'''(URL please)''' it would help if this was a separate URL from the denial of access to medical record when it was saved on your web site~~		*[mailto:Privacy@NebraskaMed.com Notice of Approved/Denied Request for Amendment form]


	This page maintained and updated by [mailto:~~dpanowic~~@unmc.edu ~~dkp~~].
			This page maintained and updated by [mailto:mhurlocker@unmc.edu mh].

← Older revision		Revision as of 15:30, September 21, 2022
Line 46:		Line 46:
	Nebraska Medicine/UNMC designates the following records as its DRS:		Nebraska Medicine/UNMC designates the following records as its DRS:
	#'''Legal Medical Record'''. The Health Information Management Department (HIM) shall manage access to and amendment of the Legal Medical Record. Contents of the Legal Medical Record shall be approved by the Clinical Governance Committee.		#'''Legal Medical Record'''. The Health Information Management Department (HIM) shall manage access to and amendment of the Legal Medical Record. Contents of the Legal Medical Record shall be approved by the Clinical Governance Committee.
	#'''Billing Records'''. The DRS billing record includes all of the data elements required on the [ CMS-1500 form] or [ Health Care Financing Administration claim form (HCFA)]. The contents shall be approved by the Nebraska Medicine Chief Financial Officer for UNMC clinical operations using One Chart for patient care.		#'''Billing Records'''. The DRS billing record includes all of the data elements required on the [ CMS-1500 form] '''( form name and URL please)''' or [ Health Care Financing Administration claim form (HCFA)] '''(URL please)'''. The contents shall be approved by the Nebraska Medicine Chief Financial Officer for UNMC clinical operations using One Chart for patient care.
	#Any other record used in whole or in part by or for the covered entity to make decisions about Individuals.		#Any other record used in whole or in part by or for the covered entity to make decisions about Individuals.
	===Access to the Designated Record Set===		===Access to the Designated Record Set===
	#Individuals have the right to inspect and obtain a copy of PHI about the Individual in their DRS for as long as the PHI is maintained in the DRS, subject to the limitations in ~~sections~~ 13 and 14 below.		#Individuals have the right to inspect and obtain a copy of PHI about the Individual in their DRS for as long as the PHI is maintained in the DRS, subject to the limitations in Sections 13 and 14 below.
	#If the same record that is the subject of the request is maintained in more than one DRS or at more than one location, the department need only produce the record once in response to a request for access.		#If the same record that is the subject of the request is maintained in more than one DRS or at more than one location, the department need only produce the record once in response to a request for access.
	#'''Initiating a Request'''. Individuals shall complete a [Patient Access Request form (not yet approved)] to inspect and/or obtain a copy of the DRS, and submit it to HIM. HIM is responsible for the processing of all such requests. If the Individual completes an '''[Authorization for Release of Information Form, CON MR 0074] please advise (URL)'''and the recipient is the Individual or a third party designated by the Individual, this will be treated as a request for access.		#'''Initiating a Request'''. Individuals shall complete a [Patient Access Request form (not yet approved)] to inspect and/or obtain a copy of the DRS, and submit it to HIM. HIM is responsible for the processing of all such requests. If the Individual completes an '''[Authorization for Release of Information Form, CON MR 0074] please advise (URL)'''and the recipient is the Individual or a third party designated by the Individual, this will be treated as a request for access.
Line 140:		Line 140:
	*[https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a]		*[https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a]
	*[https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493 Clinical Laboratory Improvements Amendments of 1988, 42 C.F.R. § 493]		*[https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493 Clinical Laboratory Improvements Amendments of 1988, 42 C.F.R. § 493]
			*[ CMS-1500 form] '''( form name and URL please)'''
			*[ Health Care Financing Administration claim form (HCFA)] '''(URL please)'''
	*[Patient Access Request form] (not yet approved)		*[Patient Access Request form] (not yet approved)
	*[Authorization for Release of Information Form, CON MR 0074]		*[Authorization for Release of Information Form, CON MR 0074]
	*[ Denial of Access to Medical Record/Billing Record]		*[ Denial of Access to Medical Record/Billing Record]
	*[ Correction/Amendment of Medical/Billing Information form] '''(URL please)''' it would help if this was a separate URL from the denial of access to medical record when it was saved on your web site		*[ Correction/Amendment of Medical/Billing Information form] '''(URL please)''' it would help if this was a separate URL from the denial of access to medical record when it was saved on your web site
	*[ Notice of Approved/Denied Request for Amendment form ']''(URL please)''' it would help if this was a separate URL from the denial of access to medical record when it was saved on your web site		*[ Notice of Approved/Denied Request for Amendment form ] '''(URL please)''' it would help if this was a separate URL from the denial of access to medical record when it was saved on your web site


	This page maintained and updated by [mailto:dpanowic@unmc.edu dkp].		This page maintained and updated by [mailto:dpanowic@unmc.edu dkp].

← Older revision		Revision as of 11:01, September 20, 2022
Line 30:		Line 30:
	Policy No.: '''6059'''<br />		Policy No.: '''6059'''<br />
	Effective Date: '''03/17/03'''<br />		Effective Date: '''03/17/03'''<br />
	Revised Date: '''09/09/22 Draft'''<br />		Revised Date: '''09/20/22 Draft'''<br />
	Reviewed Date:<br />		Reviewed Date:<br />

Line 51:		Line 51:
	#Individuals have the right to inspect and obtain a copy of PHI about the Individual in their DRS for as long as the PHI is maintained in the DRS, subject to the limitations in sections 13 and 14 below.		#Individuals have the right to inspect and obtain a copy of PHI about the Individual in their DRS for as long as the PHI is maintained in the DRS, subject to the limitations in sections 13 and 14 below.
	#If the same record that is the subject of the request is maintained in more than one DRS or at more than one location, the department need only produce the record once in response to a request for access.		#If the same record that is the subject of the request is maintained in more than one DRS or at more than one location, the department need only produce the record once in response to a request for access.
	#'''Initiating a Request'''. Individuals shall complete a [Patient Access Request form] to inspect and/or obtain a copy of the DRS, and submit it to HIM. HIM is responsible for the processing of all such requests. If the Individual completes an [Authorization for Release of Information] and the recipient is the Individual or a third party designated by the Individual, this will be treated as a request for access.		#'''Initiating a Request'''. Individuals shall complete a [Patient Access Request form (not yet approved)] to inspect and/or obtain a copy of the DRS, and submit it to HIM. HIM is responsible for the processing of all such requests. If the Individual completes an '''[Authorization for Release of Information Form, CON MR 0074] please advise (URL)'''and the recipient is the Individual or a third party designated by the Individual, this will be treated as a request for access.
	#'''Review for Completeness'''. When a Patient Access Request or Authorization for Release of Information form is received, HIM shall review the form for completion. If any information is incomplete that is necessary for an access request ('''NOTE:''' some information on the Authorization for Release of Information is not necessary for a request for access), HIM will notify the Individual that they cannot process the incomplete request. HIM should document on the form the attempts to contact the Individual.		#'''Review for Completeness'''. When a Patient Access Request or Authorization for Release of Information form is received, HIM shall review the form for completion. If any information is incomplete that is necessary for an access request ('''NOTE:''' some information on the Authorization for Release of Information is not necessary for a request for access), HIM will notify the Individual that they cannot process the incomplete request. HIM should document on the form the attempts to contact the Individual.
	#'''Timeframe for Response.'''		#'''Timeframe for Response.'''
	#*If examination of the records is requested, Nebraska Medicine/UNMC shall make the records available for inspection within ten (10) days of the date Nebraska Medicine/UNMC received the request.		#*If examination of the records is requested, Nebraska Medicine/UNMC shall make the records available for inspection within ten (10) days of the date Nebraska Medicine/UNMC received the request.
	#*If unusual circumstances have delayed handling the request, HIM may notify the Individual in writing that an extension (not to exceed 21 days) from the original date Nebraska Medicine/UNMC received the complete request is necessary and shall provide the reasons the extension is necessary. The extension notice must state the date by which access or copies will be available. ~~(See the [Extension Notice] provided with this policy.)~~		#*If unusual circumstances have delayed handling the request, HIM may notify the Individual in writing that an extension (not to exceed 21 days) from the original date Nebraska Medicine/UNMC received the complete request is necessary and shall provide the reasons the extension is necessary. The extension notice must state the date by which access or copies will be available.
	#'''If copies of the records are requested, Nebraska Medicine/UNMC must produce the requested copies within 30 days of the date Nebraska Medicine/UNMC received the request. No extension of this date is permitted without the Individual’s consent.'''		#'''If copies of the records are requested, Nebraska Medicine/UNMC must produce the requested copies within 30 days of the date Nebraska Medicine/UNMC received the request. No extension of this date is permitted without the Individual’s consent.'''
	#*If PHI is maintained electronically in one or more DRS for such Individual and the Individual requests an electronic copy of their information, Nebraska Medicine/UNMC must provide such information to the Individual in the form and format requested by the Individual, if it is readily producible. If Nebraska Medicine/UNMC cannot readily produce it as requested by the Individual, then such information must be produced in a form and format as mutually agreed by the Individual and HIM/UNMC. If HIM/UNMC and the Individual cannot agree on an electronic form and format, then HIM/UNMC must provide a hard copy option to fulfill the access request.		#*If PHI is maintained electronically in one or more DRS for such Individual and the Individual requests an electronic copy of their information, Nebraska Medicine/UNMC must provide such information to the Individual in the form and format requested by the Individual, if it is readily producible. If Nebraska Medicine/UNMC cannot readily produce it as requested by the Individual, then such information must be produced in a form and format as mutually agreed by the Individual and HIM/UNMC. If HIM/UNMC and the Individual cannot agree on an electronic form and format, then HIM/UNMC must provide a hard copy option to fulfill the access request.
Line 66:		Line 66:
	#If the Individual requests in advance an explanation or summary of the information and agrees to pay the fee for preparing the summary, HIM shall prepare the summary and provide it to the Individual.		#If the Individual requests in advance an explanation or summary of the information and agrees to pay the fee for preparing the summary, HIM shall prepare the summary and provide it to the Individual.
	#The Individual will be notified when the records are available for inspection or that a copy is available for pick-up or mailing/e-mailing. The total cost to the Individual for producing and mailing/e-mailing a copy should be included. Payment for copying/mailing/e-mailing the requested records will be collected prior to the time the records are released. Individuals generally have access to their own medical information during and after treatment via the One Chart \| PATIENT portal. The One Chart \| PATIENT portal is a secure online application that allows Individuals to view portions of their medical and billing record. Individuals may give others proxy access to their portal account. Parents may obtain limited proxy access to the records of their children. Reference Nebraska Medicine’s One Chart \| Patient (Electronic Health Record Portal) policy, IM45, for current information on eligibility for patient and proxy access.		#The Individual will be notified when the records are available for inspection or that a copy is available for pick-up or mailing/e-mailing. The total cost to the Individual for producing and mailing/e-mailing a copy should be included. Payment for copying/mailing/e-mailing the requested records will be collected prior to the time the records are released. Individuals generally have access to their own medical information during and after treatment via the One Chart \| PATIENT portal. The One Chart \| PATIENT portal is a secure online application that allows Individuals to view portions of their medical and billing record. Individuals may give others proxy access to their portal account. Parents may obtain limited proxy access to the records of their children. Reference Nebraska Medicine’s One Chart \| Patient (Electronic Health Record Portal) policy, IM45, for current information on eligibility for patient and proxy access.
	#'''Denials of Access'''. HIM should review the request to determine if one or more of the following grounds for denying access exists as to all or part of the requested records. Access may be denied, in coordination with HIM and the Privacy Office, for reasons listed under Sections 13 and 14 below. The Individual must be provided with a written denial, including the basis for denial; a statement of their review rights under n below if applicable; and a description of how the Individual may file a complaint to Nebraska Medicine/UNMC, along with name, title, and telephone number, or to the Secretary Health and Human Services '''(see ~~form at Attachment 1) please advise name~~ of ~~form and where located (URL~~)~~'''~~. If Nebraska Medicine/UNMC does not maintain the PHI that is the subject of the Individual's request for access and knows where the requested information is maintained, Nebraska Medicine/UNMC will inform the Individual where to direct the request for access.		#'''Denials of Access'''. HIM should review the request to determine if one or more of the following grounds for denying access exists as to all or part of the requested records. Access may be denied, in coordination with HIM and the Privacy Office, for reasons listed under Sections 13 and 14 below. The Individual must be provided with a written denial, including the basis for denial; a statement of their review rights under n below if applicable; and a description of how the Individual may file a complaint to Nebraska Medicine/UNMC, along with name, title, and telephone number, or to the Secretary Health and Human Services '''(see [ Denial of Access to Medical Record/Billing Record]) . If Nebraska Medicine/UNMC does not maintain the PHI that is the subject of the Individual's request for access and knows where the requested information is maintained, Nebraska Medicine/UNMC will inform the Individual where to direct the request for access.
	#'''Unreviewable Grounds for Denial of Access'''. HIM, in coordination with the Privacy Office, may deny the Individual the right to access their DRS for reasons listed below without providing the Individual with an opportunity for review.		#'''Unreviewable Grounds for Denial of Access'''. HIM, in coordination with the Privacy Office, may deny the Individual the right to access their DRS for reasons listed below without providing the Individual with an opportunity for review.
	#*The information requested is not maintained by Nebraska Medicine/~~UNMC or~~ UNMC. If HIM knows where such information is maintained, the location should be noted in our response to the Individual;		#*The information requested is not maintained by Nebraska Medicine/UNMC. If HIM knows where such information is maintained, the location should be noted in our response to the Individual;
	#*The information requested is subject to the Privacy Act, 5 U.S.C. § 552(a);		#*The information requested is subject to the Privacy Act, 5 U.S.C. § 552(a);
	#*The request is for access to [https://wiki.unmc.edu/index.php~~?title=~~Access_to_Designated_Record_Set~~&action=submit~~#Psychotherapy_Notes Psychotherapy notes];		#*The request is for access to [https://wiki.unmc.edu/index.php/Access_to_Designated_Record_Set#Psychotherapy_Notes Psychotherapy notes] (also see UNMC Policy No. 6066, [[Psychotherapy Notes]]);
	#*The requested information was compiled in reasonable anticipation of, or for use in, a civil, criminal or administrative action or proceeding;		#*The requested information was compiled in reasonable anticipation of, or for use in, a civil, criminal or administrative action or proceeding;
	#*The information requested is maintained by a clinical laboratory subject to the [https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a], and access by the Individual is prohibited by law;		#*The information requested is maintained by a clinical laboratory subject to the [https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a], and access by the Individual is prohibited by law;
Line 132:		Line 132:
	*UNMC Policy No. 6051, [https://wiki.unmc.edu/index.php/Computer_Use/Electronic_Information Computer Use/Electronic Information]		*UNMC Policy No. 6051, [https://wiki.unmc.edu/index.php/Computer_Use/Electronic_Information Computer Use/Electronic Information]
	*UNMC Policy No. 6057, [https://wiki.unmc.edu/index.php/Use_and_Disclosure_of_Protected_Health_Information Use and Disclosure of Protected Health Information]		*UNMC Policy No. 6057, [https://wiki.unmc.edu/index.php/Use_and_Disclosure_of_Protected_Health_Information Use and Disclosure of Protected Health Information]
			*UNMC Policy No. 6066, [[Psychotherapy Notes]]
	*Procedure for UNMC Policies No. 6051 and 6057, [https://info.unmc.edu/its-security/policies/procedures/electronic-comm-phi.html Electronic Communication of Protected Health Information]		*Procedure for UNMC Policies No. 6051 and 6057, [https://info.unmc.edu/its-security/policies/procedures/electronic-comm-phi.html Electronic Communication of Protected Health Information]
	*Nebraska Medicine Consents and Permits policy, MS14.		*Nebraska Medicine Consents and Permits policy, MS14.
Line 139:		Line 140:
	*[https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a]		*[https://www.govinfo.gov/app/details/USCODE-2020-title42/USCODE-2020-title42-chap6A-subchapII-partF-subpart2-sec263a Clinical Laboratory Improvements Amendments of 1988, 42 U.S.C. § 263a]
	*[https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493 Clinical Laboratory Improvements Amendments of 1988, 42 C.F.R. § 493]		*[https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-493 Clinical Laboratory Improvements Amendments of 1988, 42 C.F.R. § 493]
	*[Patient Access Request form]		*[Patient Access Request form] (not yet approved)
	*[Authorization for Release of Information]		*[Authorization for Release of Information Form, CON MR 0074]
	*[~~Complaint form referenced in #12, called attachment 1 - we'll want~~ to ~~use actual form name~~]		*[ Denial of Access to Medical Record/Billing Record]
	*[~~Extension Notice~~]		*[ Correction/Amendment of Medical/Billing Information form] '''(URL please)''' it would help if this was a separate URL from the denial of access to medical record when it was saved on your web site
	*Notice of Approved/Denied Request for Amendment form		*[ Notice of Approved/Denied Request for Amendment form ']''(URL please)''' it would help if this was a separate URL from the denial of access to medical record when it was saved on your web site


	This page maintained and updated by [mailto:dpanowic@unmc.edu dkp].		This page maintained and updated by [mailto:dpanowic@unmc.edu dkp].