WHAT ABOUT HIPAA AUTHORIZATION? A HIPAA authorization is consent obtained from a person that allows a covered entity or business associate to use or disclose his or her protected health information (PHI) to someone else for a purpose that would otherwise not be allowed by the HIPAA Privacy Rule.
HIPAA Journal’s recent article entitled “What is HIPAA Authorization?” addresses some common issues about this rule.
Hybrid entities. Some organizations are considered to be “partial” or “hybrid” entities. They’re usually organizations whose primary function is not healthcare or health insurance, but who have access to health information that should be protected, such as an educational institution who provide health services to the public.
The difference between consent and authorization. Informal consent rather than formal authorization may be enough to fulfil the requirement of the HIPAA Privacy Rule in some situations. These are referred to as “Uses and Disclosures with an Opportunity to Agree or Object” and include inclusion in facility directories and notifications to friends and family (of admission into hospital).
When a person can’t give their authorization. If a patient is unable to give their authorization, covered entities must wait until the patient or their legal representative is able to give their authorization. For circumstances in which only informal consent is required, covered entities can use their professional judgment to determine whether the use or disclosure of PHI is in the patient´s best interests.
The meaning of “covered entities cannot condition treatment, payment, enrollment, or eligibility for benefits.” This means that a covered entity can’t withhold treatment, payment, enrollment, or eligibility for benefits because a patient or plan member refuses to sign an authorization giving the covered entity additional uses for their PHI.
The Requirement of writing. HIPAA requires a written authorization for every use or disclosure of PHI not required or permitted by the Privacy Rule. The retraction of HIPAA authorization must also be written. This protects covered entities in case an individual complains about a use or disclosure of PHI they previously authorized. However, HIPAA consent can be verbal, but only in circumstances when consent – rather than authorization – is an option. These are generally limited to a patient´s inclusion in a hospital directory and notifications to family or friends.
WHAT ABOUT HIPAA AUTHORIZATION?
Reference: HIPAA Journal (Oct. 9, 2021) “What is HIPAA Authorization?”
Suggested Key Terms: Estate Planning Lawyer, HIPAA Waiver, Probate Attorney, Estate Planning
Legal problems are extremely stressful, especially when your family, your health, or your freedom are at stake. At this point in time, you may not even be sure what kinds of questions you need to ask a lawyer, but that’s entirely normal. Whether your situation involves family law, estate planning, elder law, a criminal charge, or a personal injury, we will start by giving you all the information you need.
The way we see it, you deserve to get this information directly from an expert. That’s why we make it easy for you to get in touch with your lawyer, and we never ask you to sit down with a paralegal or assistant instead.
As our relationship continues, we will keep you updated about the status of your case every step of the way. Your lawyer will reach out regularly to tell you about any new developments, and he will also be happy to answer any questions you have throughout the process.