Orange County NC Website
Browse       Search
Policy 5: Policy on Patient Requests for Accounting of Disclosures of PHI <br /> North State Medical Transport <br /> Policy on Requests for Accounting of Disclosures of Protected Health Information <br /> Purpose <br /> The Health Insurance Portability and Accountability Act of 16 ("HIPAA") grants <br /> individuals the right to an accounting of disclosures of their protected health information <br /> ("PHI")from paper and electronic records. North State Medical Transport has an obligation to <br /> render an accounting to individuals in accordance with federal and state law. To ensure that <br /> North State Medical Transport complies with its obligations,this policy outlines our procedures <br /> for handling requests for an accounting and establishes the procedures by which patients or <br /> their authorized representatives may request an accounting of disclosures of PHI from North <br /> State Medical Transport. <br /> { <br /> Scope <br /> This policy applies to all North State Medical Transport staff members who receive <br /> requests from patients for an accounting of disclosures of PHI. Generally, all requests will be <br /> directed to the HIPAA Compliance Officer and it shall be the responsibility 99 of the HIPAA <br /> Compliance Officer to handle all accounting requests. <br /> Procedure <br /> Requests for an Accounting <br /> 1. Patients and their authorized representatives shall have a right to request an accounting <br /> of certain disclosures of PHI made by North State Medical Transport. <br /> 2. If a patient or their authorized representative requests an accounting of disclosures of <br /> PHI,the requestor shall be referred to the HIPAA Compliance Officer. The HIPAA <br /> Compliance Officer shall request that the patient or authorized representative complete <br /> North State Medical Transport's "Patient Request for Accounting of Disclosures <br /> Protected Health Information" Form. <br /> 3. The HIPAA Compliance Officer must verify the patient's identity, or, if the requestor is <br /> not the patient,the name and identity of the representative and whether the <br /> representative has the authority to act on the patient's behalf. The use of a driver's <br /> license, social security card, or other form of government-issued identification is <br /> acceptable for this purpose. If it is impossible for the requestor to physically come in to <br /> 4'. <br /> make the request and verify this information,the HIPAA Compliance Officer shall ask <br /> the requestor to verify the patient's name, date of birth, SSN, address, and telephone <br />