Orange County NC Website
Browse       Search
Policy 3: Policy on Patient Requests for Amendment of PHI <br /> North State Medical Transport <br /> Policy on Patient Requests for Amendment of <br /> Protected Health Information <br /> Purpose <br /> The Health Insurance Portability and Accountability Act of 1996 ("HIPAA") grants <br /> individuals the right to request that North State Medical Transport amend their protected <br /> health information ("PHI") contained in a Designated Record Set("DRS"). (See, Policy on <br /> Designated Record Sets). North State Medical Transport has an obligation to afford individuals <br /> the right to request an amendment to their PHI in accordance with federal and state law. To <br /> ensure that North State Medical Transport complies with its obligations,this policy outlines <br /> procedures for handling patient requests for amendment of their PHI and establishes the <br /> procedures by which patients or authorized representatives may make a request for an <br /> amendment to PHI. <br /> Scope <br /> This policy applies to all North State Medical Transport staff members who handle <br /> requests from patients for amendment to PHI. Generally, all requests will be directed to the <br /> HIPAA Compliance Officer and it shall be the responsibility of the HIPAA Compliance Officer to <br /> handle all requests for amendment of PHI. <br /> Procedure <br /> Requests for Amendment of PHI <br /> 1. Patients or their authorized representatives shall be granted the right to request an <br /> amendment to a patient's PHI contained in the DRS. <br /> 2. If a patient or authorized representative requests an amendment to PHI,the requestor <br /> shall be referred to the HIPAA Compliance Officer. The HIPAA Compliance Officer shall <br /> request that the patient or authorized representative complete North State Medical <br /> Transport's "Patient Request for Amendment of Protected Health Information" Form. <br /> 3. The HIPAA Compliance Officer must verify the patient's identity, or, if the requestor is <br /> not the patient,the name and identity of the representative and whether the <br /> representative has the authority to act on the patient's behalf. The use of a driver's <br /> license, social security card, or other form of government-issued identification is <br /> acceptable for this purpose. If it is impossible for the requestor to physically come in to <br /> make the request and verify this information,the HIPAA Compliance Officer shall ask <br /> FI <br />