HIPAA's Privacy Controls: Restrictions requested by an individual
HIM Connection, October 20, 2009
Want to receive articles like this one in your inbox? Subscribe to HIM Connection!
Under the HITECH Act, when an individual request that a CE not release PHI to a health plan for payment or healthcare operations (i.e., not for treatment), and the provider has been paid “out of pocket in full,” the CE must comply. This is a change to the HIPAA rule, which permitted the CE to deny restrictions requested by an individual.
If accepting such restrictions is new for a CE, and the CE uses BAs to perform work that can result in the release of PHI to health plans, the CE and BA(s) must develop a process to restrict selected disclosure. This would apply to providers using a billing service to submit electronic claims to health plans, for example.
Note: This information is from The HIPAA and HITECH Toolkit: A Business Associate and Covered Entity Guide to Privacy and Security by Kate Borten, CISSP, CISM. For ordering information, visit the HCMarketplace or call 887-727-1728.
Want to receive articles like this one in your inbox? Subscribe to HIM Connection!
Related Products
-
Briefings on APCs
Worried about the complexities of the new rules under OPPS and APCs? Briefings on APCs helps you understand the new rules...
-
Medical Records Briefing
Guiding Health Information Management professionals through the continuously changing field of medical records and toward a...
-
Briefings on Coding Compliance Strategies
Submitting improper Medicare documentaion can lead to denial of fees, payback, fines, and increased diligence from payers...
-
Briefings on HIPAA
How can you minimize the impact of HIPAA? Subscribe to Briefings on HIPAA, your health information management resource for...
-
APC Answer Letter
Get this informative 8-page newsletter filled with answers to readers' questions!
Most Popular
- Articles
-
- Q/A: Billing telemetry daily monitoring
- Credentialing monthly: What is the role of the credentials committee in addressing unprofessional conduct?
- 2010 ICD-9 code updates now available online
- Master modifiers to ensure accurate reimbursement
- H1N1 hits Maine facility
- Radiologist indicted for fraudulently signing reports
- Don’t be scared into silence: Affiliation letter safeguards allow you to disclose more
- National Quality Forum creates standardized set of data for electronic health records
- New report reveals $47 billion in Medicare fraud
- Understand the H1N1 Flu and how to code it
- E-mailed
-
- Credentialing monthly: What is the role of the credentials committee in addressing unprofessional conduct?
- Q/A: Billing telemetry daily monitoring
- H1N1 hits Maine facility
- New report reveals $47 billion in Medicare fraud
- Radiologist indicted for fraudulently signing reports
- Revised MS.1.20 'huge improvement', out for comment again
- Briefings on Outpatient Rehab Reimbursement and Regulations, December 2009
- Hand hygiene rates improved through variety of reinforcement styles
- Press Ganey report: Patient satisfaction increasing across the country
- Residency Program Alert, December 2009
- Searched