UAMS ADMINISTRATIVE GUIDE
UAMS ADMINISTRATIVE GUIDE
NUMBER: 3.1.26
DATE: 04/01/03
REVISION: 09/17/2007
| SECTION: | ADMINISTRATION |
| AREA: | GENERAL ADMINISTRATION |
| SUBJECT: | ACCOUNTING FOR DISCLOSURES |
To inform the UAMS workforce about the procedure for obtaining an accounting of disclosures of Protected Health Information (PHI).
UAMS Workforce
Accounting for Disclosures is a method of documenting and tracking certain types of disclosures of Protected Health Information (PHI) made by UAMS, verbally or in writing, to persons or entities who are not a part of UAMS.
Disclosure means the release, transfer, provision of access to, or divulging of information in any manner (verbally or in writing) by UAMS to persons who are not UAMS employees or students, or to any other person or entity OUTSIDE of UAMS.
Protected Health Information (PHI) means information that is part of an individual’s health information that identifies the individual or there is a reasonable basis to believe the information could be used to identify the individual, including demographic information, and that (i) relates to the past, present or future physical or mental health or condition of the individual; (ii) relates to the provision of health care services to the individual; or (iii) relates to the past, present, or future payment for the provision of health care services to an individual. This includes PHI which is recorded or transmitted in any form or medium (verbally, or in writing, or electronically). PHI excludes health information maintained in educational records covered by the federal Family Educational Rights Privacy Act and health information about UAMS employees maintained by UAMS in its role as an employer.
UAMS Workforce means for purposes of this Policy, physicians, employees, volunteers, trainees, and other persons whose conduct, in the performance of work for UAMS, is under the direct control of UAMS, whether or not they are paid by UAMS.
UAMS will establish and maintain a system for Accounting of Disclosures as required by HIPAA.
Beginning April 14, 2003, a UAMS patient may request an Accounting of Disclosures of his or her own PHI for up to a period of six years prior to the patient’s date of request. UAMS is not required to account for any disclosures made prior to April 14, 2003.
1. Disclosures Exempt From Accounting: The following types of disclosures do NOT have to be included in the Accounting of Disclosures. Disclosures that were made:
A. for treatment of the patient, for payment of or reimbursement for healthcare services provided to the patient, or for health care operations see UAMS Use and Disclosure of PHI and Medical Records Policy, 3.1.28 for more information on the use and disclosure of PHI for treatment, payment and health care operations which do not require patient authorizations or accounting for disclosures;
B. directly to the patient about their own information;
C. disclosures permitted by a signed patient authorization;
D. from a patient directory;
E. to individuals involved in the patient’s care;
F. for national security or other intelligence purposes;
G. incident to a permitted use or disclosure;
H. for purposes of a Limited Data Set in which the patient’s information that could identify the patient is excluded from the Data Set;
I. to correctional institutions or law enforcement when the patient is an inmate or otherwise in their lawful custody;
J. disclosures to and by Business Associates with whom UAMS has a Business Associate agreement, as long as the disclosures are for an exempt purpose, such as for payment or health care operations of UAMS; or
K. any disclosures made prior to April 14, 2003.
2. Disclosures Subject to Accounting Requirement: Except for any disclosures described above in Paragraph I, disclosures required or allowed by law without patient authorization must be included in the accounting. (Also refer to applicable section of the UAMS Use and Disclosure of PHI and Medical Records Policy, #3.1.28).
3. Examples of disclosures which MUST BE INCLUDED in an accounting include, but are not limited to, the following disclosures (if there is no signed authorization by the patient that meets the HIPAA authorization requirements set forth in the UAMS Use and Disclosure of PHI and Medical Records Policy, #3.1.28).
A. Arkansas Department of Health for TB, HIV, STD, or other infectious disease reporting.
B. Arkansas Department of Health for State Health Data Clearinghouse reporting;
C. Arkansas Department of Health, Division of Vital Records, for reporting of births or deaths;
D. Office of Long Term Care Division of the Arkansas Department of Health and Human Services for purposes of investigating complaints or carrying out other authorized functions of that Office;
E. FDA reporting for death, adverse event, or devices subject to tracking;
F. Organ, eye and tissue donation agencies;
G. Registries outside of UAMS which require disclosures, such as Cancer Registry, Immunization Registry, and Trauma Registry;
H. Spinal Cord injury reporting;
I. Cases of abuse/neglect requiring reporting to authorities;
J. County Coroner or County Sheriff for sudden infant death cases;
K. County Sheriff and City Policy to report intentional infliction of knife or gunshot wounds;
L. U.S. Department of Health and Human Services for purposes of investigating or determining UAMS’ compliance with HIPAA regulations;
M. Coroners and Medical Examiners to identify a deceased person or to determine cause of death or to perform other duties authorized by law;
N. State Crime Lab, if (1) specimen is accompanied by a label with PHI on it; and (2) release is performed without authorization;
O. Funeral Directors;
P. Courts or administrative agencies in response to subpoena, warrant, or similar process authorized by law;
Q. Other law enforcement purposes, such as providing PHI to law enforcement about a suspected or actual crime victim, and to avert a serious threat to the health or safety of a person or to the public (unless law enforcement has requested that accounting not be provided for a specified period of time);
R. Disclosures to and by Business Associates with whom UAMS has a Business Associate agreement, only if the disclosures are not for an exempt purpose, such as for payment or health care operations of UAMS.
4. Research: UAMS must provide an accounting of disclosures of PHI in connection with research projects when there is no patient authorization for the disclosures, unless the disclosures are limited to PHI furnished in Limited Data Sets to recipients under a Data Use Agreement or a De-identified Record Set as defined in the UAMS De-Identification of PHI Policy, #3.1.31. UAMS must provide an accounting of disclosures of PHI pursuant to the waiver process. Refer to UAMS HIPAA Research Policy, #3.1.27 for more information regarding the accounting of disclosure requirements for Research.
5. For Victims of Neglect, Domestic, or Child Abuse: UAMS must provide an accounting of disclosures made for these purposes unless specifically exempted. In cases of domestic or child abuse, if UAMS has reason to believe that release to the patient’s personal representative could endanger the patient, UAMS has the discretion to decline the request.
6. Temporary Suspension of Request for Accounting: UAMS may temporarily suspend granting a patient’s request for an accounting if a health oversight agency or law enforcement official has provided UAMS with a written statement that the accounting to the patient may likely impede their activities. The written statement must also specify the time for the suspension. If the statement from the agency or official is made orally, then the suspension is limited to no longer than 30 days. UAMS must document the statement and the identity of the agency or official making the statement.
7. Time Period for Complying with Request for Accounting: UAMS must provide the patient with the accounting within sixty (60) days of the request. If unable to do so, UAMS must provide the patient with a written explanation for the delay and the date by which the accounting will be provided, not to exceed 90 days from the date of the request. This extension is permitted only once on a request for accounting.
8. Fees/Charges: The first accounting requested by the patient in any 12-month period is free. For each subsequent request by the patient in the same 12-month period, UAMS may charge a reasonable, cost-based fee, including reasonable retrieval and report preparation costs, as well as any mailing costs, only if the patient knows of such fees in advance and has the opportunity to withdraw or modify the request to avoid or reduce the fee.
1. Recording Data for Accounting:
A. UAMS will maintain the information necessary to provide an Accounting. Employees provided access to the “UAMS Release and Disclosure System” software or those employees utilizing a manual or other electronic disclosure
B. Accounting system must record all required information for each disclosure that is subject to accounting.
C. All data must be recorded on the “UAMS Release and Disclosure System” by direct electronic entry or manual or other electronic entry on a copy of the Disclosure Reporting Form (attached) or by manual entry on an Accounting Log Form or other Accounting form kept in the patient’s medical record or other official file. The information recorded must include:a. The date of disclosure;
b. The name/address of entity or person receiving the PHI;
c. A brief description of the PHI disclosed; and
d. Either a brief statement of the purpose of the disclosure that reasonably informs the patient of the basis of the disclosure; a copy of the patient’s written authorization for the disclosure, or a copy of the written request for the disclosure, if any.D. For multiple disclosures the accounting may provide the information in Item 2 above for the first disclosure, the frequency or number of disclosures made during such period and date of the last disclosure during the period.
2. Obtaining and Accounting of Disclosure:
A. Patients or authorized individuals will be directed to the Medical Records Department to request the Accounting. Requests for Accountings must be made in writing by using the attached Request for an Accounting of Disclosures form.
B. The Medical Records Department will process the request and give or mail the Accounting to the patient or authorized individual. Records personnel must record the date of the request and the date and name of the individual receiving the accounting.
SIGNATURE: ________________________________ DATE: _________________________
Patient Label if Available OR |
 |
|
|
______________________ Patient Account# |
|
| Request for an Accounting of Disclosures | |
Date of Request: ___________________________
Patient Name: __________________________________________________________________________________
Date of Birth : ___________________________ Medical Record Number: __________________________________
Patient Address : ________________________________________________________________________________
Address to send accounting of disclosure (if different than above): __________________________________________
_______________________________________________________________________________________________
_______________________________________________________________________________________________
Dates Requested:
I would like an accounting of disclosures for the following time frame: (Please note: The earliest "from date" is April 14, 2003.)
From: ____/____/____ To: ____/____/____ (no earlier than April 14, 2003)
Fees:
The first request in a 12-month period is free. There may be a charge for subsequent requests in that same 12-month period The fee for this request will be: ____________________________
I understand that there may be a fee for this accounting, and I wish to proceed with my request. I also understand that the accounting will be provided to me within 60 days unless I am notified in writing that an extension of up to 30 days is needed.
____________________________________ _______________________ Signature of Patient or Legal Representative Date
If Legal Representative, authority of Legal Representative ______________________________________ (such as parent of a minor, court-appointed guardian, administrator of estate of deceased, attorney-in-fact appointed with power of attorney, or healthcare proxy)
|
|
Place Patient Label Here or |
 |
|
|
|
|
| Disclosure Reporting Form | |
Name of the person making the disclosure: __________________________________________________
Location: ____________________________________ Phone #: ______________________________
* * * * * * *
Patient Name: _________________________________________________________________________ Last Name / First Name / MI
Date of birth: _________________________________ Medical Record #: _______________________
Brief description of the information disclosed.
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Date of the disclosure: _________________________ (MM/DD/YYY)
Brief statement of the purpose of the disclosure.
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Name of person or entity who received the information and address (if known).
_____________________________________________________________________________________
_____________________________________________________________________________________
Name of person filling out this form, if different than above:
______________________________________
EPF barcode….HIPAA |
|
