Authorization Health Information

An authorization is a detailed document that gives covered entities permission to use protected health information for specified purposes, which are generally other than treatment, payment, or health care operations, or to disclose protected health information to a third party specified by the individual.

In general, a covered entity may only use or disclose PHI if either: (1) the HIPAA Privacy Rule specifically permits or requires it; or (2) the individual who is the subject of the information gives authorization in writing. We note that this blog only discusses HIPAA; other federal or state privacy laws may apply.

Generally speaking, covered entities may disclose PHI to anyone a patient wants. They may also use or disclose PHI to notify a family member, personal representative, or someone responsible for the patient's care of the patient's location, general condition, or death.

The law requires that a HIPAA authorization form contain specific core elements to be valid. These elements include: A description of the specific information to be used or disclosed. The name or other specific identification of the person(s), or class of persons, authorized to make the requested use or disclosure.

No, you should not sign the HIPAA authorization for the release of your medical records. Often, the insurance company will act as though they cannot begin to decide how much money to offer you until they have all of your medical records.

However, PHI can be used and disclosed without a signed or verbal authorization from the patient when it is a necessary part of treatment, payment, or healthcare operations. The Minimum Necessary Standard Rule states that only the information needed to get the job done should be provided.

There are a few scenarios where you can disclose PHI without patient consent: coroner's investigations, court litigation, reporting communicable diseases to a public health department, and reporting gunshot and knife wounds.

It is important to emphasize the difference between a use and a disclosure of PHI. In general, the use of PHI means communicating that information within the covered entity.Disclosure - The release, transfer, access to, or divulging of information in any other manner outside the entity holding the information.