Use and Disclosure of PHI for Training Health Care Professionals: Difference between revisions

m
no edit summary
No edit summary
mNo edit summary
Line 103: Line 103:
*Research is not considered training or education within the meaning of this policy.
*Research is not considered training or education within the meaning of this policy.
*All research requests using PHI must be submitted to the UNMC IRB for review and approval. See UNMC [https://guides.unmc.edu/books/hrpp-policies-and-procedures Human Research Protection Program Policies and Procedures]. The IRB-approved consent also contains the HIPAA-compliant authorization when required under HIPAA. The UNMC IRB operates as UNMC’s Privacy Board and approves all waivers of authorization as permitted under HIPAA.   
*All research requests using PHI must be submitted to the UNMC IRB for review and approval. See UNMC [https://guides.unmc.edu/books/hrpp-policies-and-procedures Human Research Protection Program Policies and Procedures]. The IRB-approved consent also contains the HIPAA-compliant authorization when required under HIPAA. The UNMC IRB operates as UNMC’s Privacy Board and approves all waivers of authorization as permitted under HIPAA.   
*Review of PHI Preparatory to Research. UNMC staff and students who wish to review PHI to prepare a research proposal must submit a "Request for Electronic Health Data" form to the [www.unmc.edu/cctr/ehr_research.html Electronic Health Record Core].
*Review of PHI Preparatory to Research. UNMC staff and students who wish to review PHI to prepare a research proposal must submit a "Request for Electronic Health Data" form at [https://unmcredcap.unmc.edu/redcap/surveys/?s=NMPNWMEA7W Electronic Health Data Request].
===De-identification of PHI for Educational Purposes===
===De-identification of PHI for Educational Purposes===
PHI may be used to create information that is not individually identifiable health information (de-identified). The HIPAA privacy rules do not apply to information that does not identify an individual and with respect to which there is no reasonable basis to believe that the information can be used to identify an individual. However, de-identification to HIPAA standards is challenging and is not always possible, which often results in the need for written Individual authorization to use/disclose the patient’s PHI. Beyond the removal of identifiers, the following considerations are required by the Privacy Office:
PHI may be used to create information that is not individually identifiable health information (de-identified). The HIPAA privacy rules do not apply to information that does not identify an individual and with respect to which there is no reasonable basis to believe that the information can be used to identify an individual. However, de-identification to HIPAA standards is challenging and is not always possible, which often results in the need for written Individual authorization to use/disclose the patient’s PHI. Beyond the removal of identifiers, the following considerations are required by the Privacy Office:
Line 126: Line 126:
*Med Staff’s Visiting Staff policy, MS28.
*Med Staff’s Visiting Staff policy, MS28.
*Education Authorization form CON MR 1900
*Education Authorization form CON MR 1900
*Request for Electronic Health Data Form
*"Request for Electronic Health Data" form at [https://unmcredcap.unmc.edu/redcap/surveys/?s=NMPNWMEA7W Electronic Health Data Request]
*[http://newintranet.nebraskamed.com/AnalyticsRequest/ Analytics Work Request]
*[http://newintranet.nebraskamed.com/AnalyticsRequest/ Analytics Work Request]
*[https://www.unmc.edu/student-success/pathway-programs/job-shadow.html Nebraska Medicine’s job shadowing process]
*[https://www.unmc.edu/student-success/pathway-programs/job-shadow.html Nebraska Medicine’s job shadowing process]


This page maintained by [mailto:dpanowic@unmc.edu dkp].
This page maintained by [mailto:dpanowic@unmc.edu dkp].