Orange County NC Website
Policy 12: Policy on Minimum Necessary Requirement&Role-Based Access to PHI <br /> North State Medical Transport <br /> Policy on Minimum Necessary Requirement and Role-Based Access to PHI <br /> Purpose <br /> Generally,the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") <br /> requires that North State Medical Transport only use or disclose the minimum amount of <br /> protected health information ("PHI")that is needed to accomplish the intended purpose for <br /> which the use or disclosure is made. This policy outlines North State Medical Transport's <br /> commitment to adhere to HIPAA's "minimum necessary requirement." In order to effectively <br /> meet our obligations,this policy outlines the appropriate levels of access to PHI that specific <br /> staff members of North State Medical Transport should have—"Role Based Access." This policy <br /> does not in any way limit the amount of PHI that may be exchanged between North State <br /> Medical Transport staff members or between North State Medical Transport staff members and <br /> other individuals during the course of treating patients. <br /> Scope <br /> This policy applies to all North State Medical Transport staff members who have any <br /> degree of access to PHI at North State Medical Transport. <br /> Procedure <br /> North State Medical Transport retains strict requirements on the security, access, <br /> disclosure and use of PHI. Access, disclosure and use of PHI will be based on the role of the <br /> individual staff member in the organization, and only to the extent that the person needs to <br /> access and use the PHI to complete necessary responsibilities for North State Medical <br /> Transport. When PHI is accessed, disclosed and used,the individuals involved will make every <br /> effort, except in patient care situations,to only access, use, and disclose the minimum <br /> necessary amount of information needed to accomplish the intended purpose. <br /> Role Based Access <br /> Access to PHI will be limited to those who need access to carry out their duties. The <br /> following table describes the specific categories or types of PHI to which identified persons <br /> need access, and any conditions that would apply to such access. <br /> £"" <br /> job Title Description of PHI to Be y k Conditions,+of Access to PHI ti <br />