Your Rights You Have the Right To: 1. Inspect and receive copies of your medical information, based on hospital policies and procedures. 2. Request, in writing, changes to your health information. Your request will be reviewed based on hospital policy and procedure, however the hospital has the right to deny the request. A written statement will be provided regarding the decision. 3. Request, in writing, that the hospital limits how they use or share health information about you or your child. However, they may not be able to comply with all requests. 4. Withdraw, in writing, any authority you have given to share your information. However, the hospital won’t be able to take back information they have previously given out. 5. Request, in writing, and receive a record of times when your health information was shared without your written permission.
Responsibilities of the Health Care Provider The Law Requires Us To: 1. maintain the privacy of health information about you or your child; 2. provide the privacy notice of our duties, your rights, and our privacy practices; 3. follow the terms of our notice; and 4. notify you if we cannot continue honoring your request.
By. Taylor Smee •
Cited: • Brighamandwomens.org hhs.gov/ocr/privacy/index.html • cms.gov/hipaageninfo/
HIPAA: Your Right To Privacy
HIPAA: The Health Insurance Portability and Accountability Act
Health Information Privacy The Office for Civil Rights enforces the HIPAA Privacy Rule, which protects the privacy of individually identifiable health information; the HIPAA Security Rule, which sets national standards for the security of electronic protected health information; and the confidentiality provisions of the Patient Safety Rule, which protect identifiable information being used to analyze patient safety events and improve patient safety.
“Your privacy is our priority.” Protected Health Information The Privacy Rule protects all “individually identifiable health information” held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper, or oral. This information is known to the Privacy Rule as “protected health information (PHI).”
“Individually identifiable health information” is information, including demographic data, that relates to: •
The individual’s past, present or future physical or mental health or condition,
The provision of health care to the individual, or
The past, present or future payment for the provision of health care to the individual
And that identifies the individual or for which there is a reasonable basis to believe it can be used to identify the individual.
Common Identifiers of Identifiable Health Information • • • •
Name Address Birth Date Social Security Number