2005-030 - Laserfiche WebLink

Home Browse Search

All other requests must be reviewed on an individual basis to ensure that the amount of information requested is the minimum necessary to accomplish the purpose of the disclosure . The " minimum -necessary" standard does not apply to any of the following : • uses or disclosures made to the individual ; • uses or disclosures made pursuant to a valid authorization ; • disclosures made to the DOL ; • uses or disclosures required by law ; and • uses or disclosures required to comply with HIPAA . Minimum Necessary When Disclosing PHI. For making disclosures of PHI to the medical plan, prescription plan, Employee Assistance Plan, dental plan, vision plan, reciprocal benefits plan, auditors , and attorneys for purposes of benefit enrollment/changes , audits , claim resolution, obtaining identifications cards , benefit eligibility, hospital reports on. suspects/arrestees , and response to legal requests , by only . giving information necessary to initiate the function . All other disclosures must be reviewed on an individual basis with the Privacy Official to ensure that the amount of information disclosed is the minimum necessary to accomplish the purpose of the disclosure . Minimum Necessary When Requesting PHI. For making requests for disclosure of PHI from the prescription plan, Employee Assistance Plan, dental plan, reciprocal benefits plan, auditors , and attorneys for purposes of benefit enrollment/changes , audits , claim resolution, obtaining identifications cards , benefit . eligibility hospital reports on suspects/arrestees , and response to legal requests , by only giving information necessary to initiate the function . All other requests must be reviewed on an individual basis with the Privacy Official to ensure that the amount of information requested is the minimum necessary to accomplish the purpose of the disclosure . 10 . Disclosures of PHI to Business Associates Employees may disclose PHI to the Plan' s or the County ' s businesses associates and allow the Plans or the County ' s business associates to create or receive PHI on its behalf. However, prior to doing so , the Plan or the County, as applicable , must first obtain assurances from the business associate that it will appropriately safeguard the information . Before sharing PHI with outside consultants or contractors who meet the definition of a "business associate , " employees must contact the Privacy Official and verify that a business associate contract is in place . Business Associate is an entity that : 13