Privacy Officer's Roundtable

In section 524 (Access to PHI), in paragraph c3i and ii, it talks about the individual having access to PHI as well as the right to copy the PHI and send the PHI to an individual at their direction.  In order to send the PHI to another person, the patient must submit the request in writing including the name and where to send the information.  It doesn't require or reference an Authorization.

Q1: Does this mean that any time a patient wants their PHI sent to themselves or someone else, they do not have to use an Authorization, but just submit their request in writing including: who is receiving the PHI, what is to be sent, and where to send it, and then sign the request?

Q2: When would an Authorization be used?

It's the end of the day, so maybe I'm confused.

Thanks.

In section 524 (Access to PHI), in paragraph c3i and ii, it talks about the individual having access to PHI as well as the right to copy the PHI and send the PHI to an individual at their direction.  In order to send the PHI to another person, the patient must submit the request in writing including the name and where to send the information.  It doesn't require or reference an Authorization.

Q1: Does this mean that any time a patient wants their PHI sent to themselves or someone else, they do not have to use an Authorization, but just submit their request in writing including: who is receiving the PHI, what is to be sent, and where to send it, and then sign the request?

Q2: When would an Authorization be used?

It's the end of the day, so maybe I'm confused.

Thanks.

I don't know about anyone else but we've seen an increase in patients (as directed by their attorneys), requesting "access" to their medical records and having us send them to their representative (aka their attorney).  The main reason we believe they are doing this is to avoid paying for the copies.