Question

I have five page paper my topic is Requirements in release of patient information policies and procedures including minor's and family member's access

Answer 1

Ans) The overall goal of data security is to protect confidential information from unauthorized or inadvertent access, disclosure, modification or destruction. Moving to an electronic environment could increase this likelihood; however, HIM professionals should ensure the following in both electronic and paper-based environments:

- Institutional security oversight groups.
- Operational policies and procedures, including confidentiality statements signed by all staff.
- Clearly assigned responsibility and accountability on confidentiality and security issues.
- User identification on each staff member, designating "need to know" status.
- Individual passwords, key cards and biometric or other means to register system access.
- Capability to monitor and audit access tracking.
- Reports on access and potential confidentiality breaches to appropriate managers and supervisors.
- Human resources policies regarding consequences for breaches.

A comprehensive security environment should be a combination of policies, procedures and system capabilities to support them.

- The HIPAA Privacy Rule provides individuals with the right to access their medical and other health records from their health care providers and health plans, upon request.

- The individual's request must be in writing, signed by the individual, and clearly identify the designated person and where to send the PHI.

- The Privacy Rule generally allows a parent to have access to the medical records about his or her child, as his or her minor child's personal representative when such access is not inconsistent with State or other law.