Transporting Protected Health Information: Difference between revisions

m
mNo edit summary
 
Line 39: Line 39:
== Definitions: ==
== Definitions: ==
''Transport'' means to physically move PHI (whether on paper, or on mobile digital devices and electronic storage device such as a laptop computer, smartphone, USB/thumb drive or a disk) from one location to another, by any means including by foot, motor vehicle including courier, airplane or other means of transportation. For example: moving a medical record from one clinic to another, from one department to another, from an external research source back to the facility, or from the office to home.
''Transport'' means to physically move PHI (whether on paper, or on mobile digital devices and electronic storage device such as a laptop computer, smartphone, USB/thumb drive or a disk) from one location to another, by any means including by foot, motor vehicle including courier, airplane or other means of transportation. For example: moving a medical record from one clinic to another, from one department to another, from an external research source back to the facility, or from the office to home.
<br \><br \>
<br \><br \>'''Protected Health Information (PHI)'''
''Protected health information'' means information that relates to past, present or future physical or mental health or condition of an individual, the provision of health care to an individual, or the past, present or future payment for health care to an individual, which identifies the individual or as to which there is a reasonable basis to believe could be used to identify the individual.
 
Individually identifiable health information including demographic information, collected from an Individual, whether oral or recorded in any medium, that:
 
* is created or received by UNMC/ACE; and
* relates to the past, present or future physical or mental health or condition of an Individual; the provision of health care to an Individual; or the past, present or future payment for the provision of health care to an Individual and identifies the Individual or with respect to which there is a reasonable basis to believe the information can be used to identify the Individual.
 
PHI includes genetic information, which includes information about:
 
* an Individual’s genetic tests;
* the genetic tests of an Individual’s family members; or
* the manifestation of a disease or disorder in such Individual’s family members (i.e., family medical history).
 
PHI excludes:
 
* individually identifiable health information of a person who has been deceased for more than fifty (50) years.
* education records covered by the Family Educational Rights and Privacy Act (FERPA); and
* employment records held by UNMC in its role as employer.
 
== Procedures: ==
== Procedures: ==
# PHI that is being transported within a facility, such as from one department to another, will be attended or supervised at all times, or otherwise secured to avoid unauthorized access, loss and/or tampering.
# PHI that is being transported within a facility, such as from one department to another, will be attended or supervised at all times, or otherwise secured to avoid unauthorized access, loss and/or tampering.