Process for Releasing PHI Recording, Tracking and Verifying the Request. Retrieving Patient's PHI. Safeguarding Patient's Sensitive Information. Releasing Patient's PHI. Completing the Request and Preparing an Invoice.
HIPAA permits health care providers to disclose to other health providers any protected health information (PHI) contained in the medical record about an individual for treatment, case management, and coordination of care and, with few exceptions, treats mental health information the same as other health information.
compliant HIPAA release form must, at the very least, contain the following information: A description of the information that will be used/disclosed. The purpose for which the information will be disclosed. The name of the person or entity to whom the information will be disclosed.
What is a mental health release of information form? A mental health release of information form outlines who has access to your client's medical records and under what circumstances they have access. This form is signed and acknowledged by your client.
The Mental Health Intake & Evaluation Forms describe background information, basic medical history and current functioning (such as mood and thought processes) needed for the intake process.
By signing this form, you authorize the institution to which this form is submitted to release your information to the requester or their authorized representative. The consent must be signed and dated by the person giving the consent.
If you are not using a form, be sure to include the full name, address, phone number, and secure fax or secure email address where the provider can send you the records.
If you access health services in the Belfast, Northern or South Eastern Health and Social Care Trusts, you can view specific parts of your medical record by using the online portal called 'My Care'. Further information on My Care and how to access it is available at: Accessing your medical records online.
You have the right to see your health records under the General Data Protection Regulations (GDPR). If they refuse, you could try making a 'subject access request'. We have explained this below. You could ask to see your records during an appointment or over the phone.
A request for information from medical records has to be made with the organisation that holds your records – the data controller. For example, your GP practice, optician or dentist. For hospital records, contact the records manager or patient services manager at the relevant hospital trust.