ࡱ> 8:7 bjbjcTcT .*>>    8AU YqqqqqLLLSLLLLLqqLqqL|qz b)0Y,} } }  LLLLLLLLLLYLLLL} LLLLLLLLL : Quick Guide to HIPAA Practices for DME Patient have a number of options regarding their PHI which include: Right to Inspect and Copy Patients have a right to inspect and copy medical information that is in their patient record. A request to inspect and copy can be denied in certain circumstances. If denied access to medical information, the patient may request that the denial be reviewed. Right to Amend If the patient feels that medical information is incorrect or incomplete, they may ask us to amend the information. In addition, the patient must provide a reason that supports the request. The supplier may deny the request for an amendment if it does not include a reason to support the request. In addition, the supplier may deny the request if the amended information is inaccurate and incomplete. Right to an Accounting of Disclosures The patient has the right to request an "accounting of disclosures." This is a list of the disclosures the supplier made of the patients PHI. The request must state a time period, which may not be longer than six years and may not include dates before April 14, 2003. The first request within a 12-month period is generally at no charge to the patient. For additional lists, the supplier may charge for the costs of providing the list. The supplier will notify the patient of the cost involved and they may choose to withdraw or modify the request at that time before any costs are incurred. Right to Request Restrictions The patient has the right to request a restriction or limitation on the PHI used or disclosed for services, equipment, payment or operations. The patient also has the right to request a limit on the medical information disclosed to someone who is involved in the patients care or the payment for care, such as a family member or friend. For example, a patient could ask the supplier to not use or disclose information about the medical necessity for the equipment they had. Right to Request Confidential Communications The patient has the right to request that the supplier communicates with them about medical matters in a certain way or at a certain location. For example, a patient can ask that the supplier only contact them at work or by mail. The supplier cannot not ask the patient for the reason of the request, and will accommodate all reasonable requests. The request must specify how or where they wish to be contacted. Right to a Paper Copy of The Notice The patient can receive notices electronically and if they wish to have a paper copy they can request a copy of this notice. If the patient agreed to receive this notice electronically, they are still entitled to a paper copy of this notice upon request. Complaints If the patient believes their privacy rights have been violated, they may file a complaint with the supplier or with the Secretary of the Department of Health and Human Services. All complaints must be submitted in writing. The patient will not be penalized for filing a complaint. Disclosing PHI Upon Request from Third Parties As Required By Law The supplier must disclose PHI when required to do so by federal, state or local law under the following circumstances. To Avert a Serious Threat to Health or Safety The supplier may use and disclose PHI when necessary to prevent a serious threat to the patients health and safety or the health and safety of the public or another person. Any disclosure, however, would only be to someone able to help prevent the threat. Workers' Compensation The supplier may release PHI for workers' compensation or similar programs. These programs provide benefits for work-related injuries or illness. Public Health Risks The supplier may disclose PHI for public health activities. Health Oversight Activities The supplier may disclose PHI to a health oversight agency for activities authorized by law. These oversight activities include, for example, audits, investigations, inspections, and licensure. These activities are necessary for the government to monitor the health care system, government programs, and compliance with civil rights laws. Lawsuits and Disputes If the patient is involved in a lawsuit or a dispute, the supplier may disclose PHI in response to a court or administrative order. The supplier may also disclose PHI in response to a subpoena, discovery request, or other lawful process by someone else involved in the dispute, but only if efforts have been made to tell the patient about the request or to obtain an order protecting the information requested. Law Enforcement The supplier may release PHI if asked to do so by law enforcement official. National Security and Intelligence Activities The supplier may release PHI to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law. Protective Services for the President and Others The supplier may disclose PHI to authorized federal officials so they may provide protection to the President, other authorized persons or foreign heads of state or conduct special investigations. For all other entities PHI can be released to other entities, such as a law office, only with the patients written consent. The consent does not have to be in the suppliers format but must contain the following elements: Patient Name Patients signature Date For what reason the PHI will be used The document should specifically name the supplier as to whom the permission was given  The format of the request is up to the supplier, such as a hard copy or electronic format. It is helpful if the supplier determines the format in a policy and provides format examples for employees and patients to follow. This prompts consistency in the process flow and minimizes the risk of a PHI related legal action.  Many states have laws, which provide the patient with a no-charge copy of their files. Agencies requesting documents on the patients behalf generally can be charges a fee for copying, mailing and employee time.     'lm+ , 4 [ ~g{,B=l </0½jhA0JU hAPJ\hACJOJQJ\^J hAPJ\ hA]hAPJmH sH  hA6PJ hAPJ]hA56PJjhA0JPJU hA5PJ hAPJhA8'(lm 4 5 [ ~^^fg{+,B=>l  <^^^ 0^^^^ hAPJ\hAjhAU ,1h/ =!"#$% ^ 666666666vvvvvvvvv666666>6666666666666666666666666666666666666666666666666hH6666666666666666666666666666666666666666666666666666666666666666662 0@P`p2( 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p8XV~_HmH nH sH tH L`L Normal$CJOJQJ^J_HaJmH sH tH ||  Heading 1)$$ 8Z6*$@&^8a$&56@CJOJQJ^JaJmH sH B@B  Heading 2$@& 5PJ\]XX  Heading 3$7$8$@&H$5CJOJQJ\^JaJD@D  Heading 4$@&^5PJDA`D Default Paragraph FontViV 0 Table Normal :V 44 la (k ( 0No List RPR  Body Text 25B*OJQJ\^JaJ phffRf Body Text Indent 27$8$H$^CJOJQJ^JaJ>@>  Footnote TextCJaJ@&@!@ Footnote ReferenceH*4>@24 Title$a$>*CJ$6B@B6  Body Text5PJPK![Content_Types].xmlj0Eжr(΢Iw},-j4 wP-t#bΙ{UTU^hd}㨫)*1P' ^W0)T9<l#$yi};~@(Hu* Dנz/0ǰ $ X3aZ,D0j~3߶b~i>3\`?/[G\!-Rk.sԻ..a濭?PK!֧6 _rels/.relsj0 }Q%v/C/}(h"O = C?hv=Ʌ%[xp{۵_Pѣ<1H0ORBdJE4b$q_6LR7`0̞O,En7Lib/SeеPK!kytheme/theme/themeManager.xml M @}w7c(EbˮCAǠҟ7՛K Y, e.|,H,lxɴIsQ}#Ր ֵ+!,^$j=GW)E+& 8PK!Ptheme/theme/theme1.xmlYOo6w toc'vuر-MniP@I}úama[إ4:lЯGRX^6؊>$ !)O^rC$y@/yH*񄴽)޵߻UDb`}"qۋJחX^)I`nEp)liV[]1M<OP6r=zgbIguSebORD۫qu gZo~ٺlAplxpT0+[}`jzAV2Fi@qv֬5\|ʜ̭NleXdsjcs7f W+Ն7`g ȘJj|h(KD- dXiJ؇(x$( :;˹! I_TS 1?E??ZBΪmU/?~xY'y5g&΋/ɋ>GMGeD3Vq%'#q$8K)fw9:ĵ x}rxwr:\TZaG*y8IjbRc|XŻǿI u3KGnD1NIBs RuK>V.EL+M2#'fi ~V vl{u8zH *:(W☕ ~JTe\O*tHGHY}KNP*ݾ˦TѼ9/#A7qZ$*c?qUnwN%Oi4 =3ڗP 1Pm \\9Mؓ2aD];Yt\[x]}Wr|]g- eW )6-rCSj id DЇAΜIqbJ#x꺃 6k#ASh&ʌt(Q%p%m&]caSl=X\P1Mh9MVdDAaVB[݈fJíP|8 քAV^f Hn- "d>znNJ ة>b&2vKyϼD:,AGm\nziÙ.uχYC6OMf3or$5NHT[XF64T,ќM0E)`#5XY`פ;%1U٥m;R>QD DcpU'&LE/pm%]8firS4d 7y\`JnίI R3U~7+׸#m qBiDi*L69mY&iHE=(K&N!V.KeLDĕ{D vEꦚdeNƟe(MN9ߜR6&3(a/DUz<{ˊYȳV)9Z[4^n5!J?Q3eBoCM m<.vpIYfZY_p[=al-Y}Nc͙ŋ4vfavl'SA8|*u{-ߟ0%M07%<ҍPK! ѐ'theme/theme/_rels/themeManager.xml.relsM 0wooӺ&݈Э5 6?$Q ,.aic21h:qm@RN;d`o7gK(M&$R(.1r'JЊT8V"AȻHu}|$b{P8g/]QAsم(#L[PK-![Content_Types].xmlPK-!֧6 +_rels/.relsPK-!kytheme/theme/themeManager.xmlPK-!Ptheme/theme/theme1.xmlPK-! ѐ' theme/theme/_rels/themeManager.xml.relsPK] +E  * 8@0(  B S  ?(4 mt33333%=H=h^`B*CJOJQJo(phh ^`OJQJo(oh pp^p`OJQJo(h @ @ ^@ `OJQJo(h ^`OJQJo(oh ^`OJQJo(h ^`OJQJo(h ^`OJQJo(oh PP^P`OJQJo(%=HiA@P@UnknownG* Times New Roman5Symbol3. * ArialI. ??Arial Unicode MS;. * Helvetica?= * Courier New;WingdingsACambria Math"hff6Q '6Q 'Y0}}2QHX $Pi2!xx&Quick Guide to HIPAA Practices for DMECurtmKayW Oh+'0 , L X dpx(Quick Guide to HIPAA Practices for DMECurtm Normal.dotmKayW2Microsoft Office Word@F#@g@g6Q՜.+,0  hp  VGM & Associates' } 'Quick Guide to HIPAA Practices for DME Title  !"#$%&()*+,-.01234569Root Entry FX;1Table WordDocument.*SummaryInformation('DocumentSummaryInformation8/CompObjy  F'Microsoft Office Word 97-2003 Document MSWordDocWord.Document.89q