Health Information Management

Crack down on unauthorized uses and disclosures with your EHR?s audit log

HIM Briefings, May 1, 2009

This is an excerpt from a member only article. To read the article in its entirety, please login or subscribe to HIM Briefings.

If you’re thinking about taking advantage of the incentive payments under the American Recovery and Reinvestment Act (ARRA) of 2009, keep in mind that there are stringent requirements related to patient privacy and enforcement.

Currently, patients can request an accounting of protected health information (PHI) disclosures dating back six years from the request. HIPAA doesn’t require accounting of disclosures for treatment, payment, and healthcare operations (TPO). However, the ARRA specifies that when a covered entity uses an EHR, patients may request up to three years’ worth of information, including TPO, when disclosures are made from an EHR.

This is an excerpt from a member only article. To read the article in its entirety, please login or subscribe to HIM Briefings.

Most Popular