Disclosures of PHI as Permitted or Required by Law: Difference between revisions

m
No edit summary
 
(2 intermediate revisions by one other user not shown)
Line 29: Line 29:
<br /><br />
<br /><br />
Policy No.: '''6304'''<br />
Policy No.: '''6304'''<br />
Effective Date: '''Draft 09/29/22'''<br />
Effective Date: '''Draft 10/28/22'''<br />
Revised Date: <br />
Revised Date: <br />
Revised Date: <br />
Revised Date: <br />
Line 108: Line 108:
==Definitions==
==Definitions==
===Individual===
===Individual===
The person who is the subject of the PHI. Personal representatives of the patient have the same rights as the Individual under HIPAA (i.e., they “step into the shoes” of the Individual). Personal representatives include the legal guardian and anyone else authorized by law to act on behalf of the Individual. See Nebraska Medicine Consents and Permits policy, MS14.
The person who is the subject of the PHI. Personal representatives of the Individual have the same rights as the Individual under HIPAA (i.e., they “step into the shoes” of the Individual). Personal representatives include the legal guardian and anyone else authorized by law to act on behalf of the Individual. (See Nebraska Medicine Consents and Permits policy, MS14.)
===Protected Health Information (PHI)===
===Protected Health Information (PHI)===
Individually identifiable health information including demographic information, collected from an Individual, whether oral or recorded in any medium, that:
Individually identifiable health information including demographic information, collected from an Individual, whether oral or recorded in any medium, that:
*is created or received by UNMC/Nebraska Medicine; and
*is created or received by UNMC/ACE; and
*relates to the past, present or future physical or mental health or condition of an Individual; the provision of health care to an Individual; or the past, present or future payment for the provision of health care to an Individual and identifies the Individual or with respect to which there is a reasonable basis to believe the information can be used to identify the Individual.
*relates to the past, present or future physical or mental health or condition of an Individual; the provision of health care to an Individual; or the past, present or future payment for the provision of health care to an Individual and identifies the Individual or with respect to which there is a reasonable basis to believe the information can be used to identify the Individual.
PHI includes genetic information, which includes information about the following items (and excludes information about an Individual’s sex or age):
PHI includes genetic information, which includes information about the following items (and excludes information about an Individual’s sex or age):
*an Individual’s genetic tests;   
*an Individual’s genetic tests;   
*the genetic tests of an Individual’s family members; or
*the genetic tests of an Individual’s family members; or
*the manifestation of a disease or disorder in such Individual’s family members (i.e., family medical history); or
*the manifestation of a disease or disorder in such Individual’s family members (i.e., family medical history).
*any request for, or receipt of, genetic services (e.g., genetic test, genetic counseling, genetic education), or participation in clinical research which includes genetic services by the Individual or any family member of the Individual.
PHI excludes:
PHI excludes:
*individually identifiable health information of a person who has been deceased for more than fifty (50) years.
*individually identifiable health information of a person who has been deceased for more than fifty (50) years.
Line 124: Line 123:
===Qualified Protective Order (QPO)===
===Qualified Protective Order (QPO)===
An order of a court or of an administrative tribunal or a stipulation by the parties to litigation or an administrative proceeding that:  
An order of a court or of an administrative tribunal or a stipulation by the parties to litigation or an administrative proceeding that:  
*prohibits the parties from using or disclosing PHI for any purpose other than the litigation or proceeding for which such information was requested; and  
 
*requires the return (to UNMC) or destruction of the PHI (including all copies made) at the end of the litigation or proceeding.
* prohibits the parties from using or disclosing PHI for any purpose other than the litigation or proceeding for which such information was requested; and
* requires the return (to UNMC) or destruction of the PHI (including all copies made) at the end of the litigation or proceeding.
 
===Workforce===
===Workforce===
Employees, medical staff, volunteers, trainees, and other persons whose conduct, in the performance of work for UNMC, is under the direct control of UNMC, whether or not they are paid by UNMC.
Employees, medical staff, volunteers, trainees and other persons whose conduct, in the performance of work for Nebraska Medicine/UNMC, is under the direct control of Nebraska Medicine/UNMC, whether or not they are paid by Nebraska Medicine/UNMC.
==Additional Information==
==Additional Information==
*Contact the [mailto:privacy@nebraskamed.com Privacy Office] or at 402-559-5136.
*Contact the [mailto:privacy@nebraskamed.com Privacy Office] or at 402-559-5136.