2005-030 - Laserfiche WebLink

Home Browse Search

charge in addition to the actual cost of duplication, a special service charge, which shall be reasonable and shall be based on the cost incurred . • Respond to the request within 60 days by providing the accounting (as described in more detail below) , or informing the individual -that there have been no disclosures that must be included in an accounting (see the list of exceptions to the accounting requirement below -) . If the accounting cannot be provided within the 60- day period, the deadline may be extended for 30 days by providing written notice to the individual within the original 60-day period of the reasons for the extension and the date by which the County will respond . • The accounting must include disclosures (but not uses) , of the requesting individual 's PHI made by Plan and any of its business associates during the period requested by the individual up ' to six years prior to the request. (Note , however, that the plan is not required to account for any disclosures made prior to April 14, 2003 . ) The accounting does not have to include disclosures made : • to carry out treatment, payment and health care operations ; • to the individual about. his or her own PHI; • incident to an otherwise permitted use or disclosure ; • pursuant to an individual authorization; • for specific national security or intelligence purposes ; • to correctional institutions or law enforcement when the disclosure was permitted without an authorization ; and • as part of a limited data set. • If any business associate of the Plan has the authority to disclose the individual 's PHI, then in order to obtain an accounting of the business associate ' s disclosures , the Privacy Officer for the plan will provide to the individual upon request the business associate ' s primary contact ' s name and telephone numbers : • The accounting must include the following information for each reportable disclosure of the individual's PHI : • the date of disclosure , • the name (and if known, the address) of the entity or person to whom the information was disclosed ; • a brief description of the PHI disclosed; and • a brief statement explaining the purpose for the disclosure . (The statement of purpose may ' be accomplished by providing a copy of the written request for disclosure, when applicable . ) • If the Plan has received a temporary suspension statement from a health oversight agency or a law enforcement official indicating that notice to the individual of disclosures of PHI would be reasonably likely to impede the agency' s activities , disclosure may not be required . If an employee receives such a statement, either orally or in writing, the employee must contact the Privacy Official for more guidance . 30