Privacy Officer's Roundtable

Care Everywhere Records

  • 1.  Care Everywhere Records

    Posted 10-27-2020 04:58 PM

    If you are an Epic user, do you consider Care Everywhere records to be part of your organization's designated record set? Based on HIPAA's definition of designated record set copied below, I think the answer is contingent on whether an organization is considered to be "maintaining" Care Everywhere records after they are queried. Any input would be much appreciated.

    HIPAA defines "Designated record set" as: (1) A group of records maintained by or for a covered entity that is: (i) The medical records and billing records about individuals maintained by or for a covered health care provider; (ii) The enrollment, payment, claims adjudication, and case or medical management record systems maintained by or for a health plan; or (iii) Used, in whole or in part, by or for the covered entity to make decisions about individuals.  (2) For purposes of this paragraph, the term record means any item, collection, or grouping of information that includes protected health information and is maintained, collected, used, or disseminated by or for a covered entity.

    Amanda Levine
    Director of Corporate Privacy/Privacy Officer
    Virtua Health
    2020 SCCE Membership