Privacy Officer's Roundtable

  • 1.  Disclosing PHI or previous CE

    Posted 10-24-2018 03:27 PM
    Hi all, wondering what is needed for this scenario:  Provider use to work at CE1, but now works at CE2.  Provider is being asked to testify on behalf of patient they saw when working at CE1.  Provider is willing to testify and patient is willing to give authorization to provider.   Since provider is working at CE2, does CE2 get the authorization?  Does CE1 get it?  Does provider send it to CE1 and get "ok'd" to disclose their PHI?

    Thanks

    ------------------------------
    David Garrison CHC,CHPC
    Compliance/Privacy Officer
    SEARHC
    Juneau,AK
    ------------------------------
    SCCE Membership


  • 2.  RE: Disclosing PHI or previous CE

    Posted 10-24-2018 04:11 PM
    ​I would think the authorization would be for CE1, and provider should let C2 know what is happening.

    ------------------------------
    Ann Dunham
    MBA, SPHR, CHC, CHRC
    Compliance Officer
    Hannibal Regional Healthcare System
    Hannibal, MO
    ------------------------------

    SCCE Membership


  • 3.  RE: Disclosing PHI or previous CE

    Posted 10-25-2018 06:23 AM
    ​David:
    My question is: "What is CE2's involvement in this matter?"

    If they now hold the patient record, then CE2 should get the authorization. However, if CE1 holds the record, then the authorization should go to the physician who used to work at CE1 AND a separate authorization (for access to the record) should go to CE1.

    Just my two cents...

    ------------------------------
    Dr. Randy Lewis, LMFT, CHPC
    HIPAA Privacy Officer
    Orange County Government
    Orlando, FL
    ------------------------------

    SCCE Membership


  • 4.  RE: Disclosing PHI or previous CE

    Posted 10-25-2018 11:46 AM
    Randy, the provider now works at CE2.  The patient is a patient of CE1 and saw the provider while they worked at CE1.  CE2 has no PHI belonging to the patient, other than what is in the "head" of the provider.

    ------------------------------
    David Garrison CHC,CHPC
    Compliance/Privacy Officer
    SEARHC
    Juneau,AK
    ------------------------------

    SCCE Membership


  • 5.  RE: Disclosing PHI or previous CE

    Posted 10-25-2018 02:02 PM
    Then I would think CE1.

    ------------------------------
    Carl Russell
    Compliance Analyst
    Delta Dental of Idaho
    Boise,ID

    Anything I say is my sole opinion and not of my company.
    ------------------------------

    SCCE Membership