2005-030 - Laserfiche WebLink

Home Browse Search

Procedures for Complying With Individual Rights 1 . Individual ' s Request for Access " Designated Record Set " Defined Designated Record Set is a group of records maintained by or for the County that includes : • the enrollment, payment, and claims adjudication record of an individual maintained by or for the Plan; or • other protected health information used, in whole or in part, by or for the Plan to make coverage decisions about an individual . Procedure Request From Individual, Parent of Minor Child, or Personal Representative. Upon receiving a written request from an individual (or from a minor's parent or an individual' s personal representative) for disclosure of an individual 's PHI, the employee must take the following steps . • Follow the procedures for verifying the identity of the individual (or parent or personal representative) set forth in " Verification of Identity of Those Requesting Protected Health Information. " • Review the disclosure request to determine whether the PHI requested is held in the individual 's designated record set . See the Privacy Official if it appears that the requested information is not held . in the individual' s designated record set . No request for access may be denied without approval from the Privacy Official. • Review the disclosure request to determine whether an exception to the disclosure requirement might exist ; for example, disclosure may be denied for requests to access psychotherapy notes , documents compiled for a legal proceeding, certain requests by inmates , information compiled during research when the individual has agreed to denial of access , information obtained under a promise of confidentiality, and other disclosures that are determined by a health care professional to be likely to cause harm . See the Privacy Official if there is any question about whether one of these exceptions applies. No request for access may be denied without approval from the Privacy Official. • Respond to the request by providing the information or denying the request within 30 days (60 days if the information is maintained off- site) . If the requested PHI cannot be accessed within the 30-day (or 60 - day) period , the deadline may be extended for 30 days by providing written notice to the individual within the original 30 - or 60 -day period of the reasons for the extension and the date by which the County will respond . • A Denial Notice must contain ( 1 ) the basis for the denial , (2) a statement of the individual ' s right to request a review of the denial , if applicable , and ( 3 ) a 27