Describe authorized use and disclosures.
Description should include expectations such as
- individual’s written authorization for any disclosure of PHI that is not for treatment, payment, or healthcare operations otherwise permitted under the Privacy Rule
- written format
- specific terms (i.e., access to a part of the record rather than the whole)
- plain language
- persons disclosing and/or receiving the information
- authorization obtained to disclose any psychotherapy notes.
Process/Skill Questions:
- What are some examples of specific terms?
- Why is it important to establish patient ownership of the healthcare record?
- What is meant by plain language?
- What types of authorization are necessary for disclosures?
- When can PHI be released without authorization?