HIPAA

Access vs Authorization

  • 1.  Access vs Authorization

    Posted 10-22-2020 02:19 PM
    Hi all.  How do you distinguish between a patient requesting access versus a third-party requesting records?  If a patient requests their PHI be sent to another CE and uses that CE's authorization form do you consider this access under section 524 or an authorization under section 508?

    ------------------------------
    David Garrison
    Compliance/Privacy Officer
    SEARHC
    Juneau,AK
    ------------------------------
    19th Annual CEI Virtual Conference


  • 2.  RE: Access vs Authorization

    Posted 10-23-2020 08:10 AM
    To piggyback off of this question. How do organizations view patient requests for their own records? Do you view them all as access requests or have 2 separate forms and depending upon which is submitted process accordingly? I'm trying to figure out the best workflow. Appreciate any thoughts. Thanks!

    ------------------------------
    Brenda Manning J.D., C.H.C., C.H.P.C.
    Privacy Director
    Privacy Officer
    Carilion Clinic

    The views expressed herein are my own and do not represent those of my employer. They are not meant to constitute legal advice or create an attorney-client relationship.
    ------------------------------

    19th Annual CEI Virtual Conference