 |
|
|
 |
 YOU ARE HERE : HOME / HIPAA Frequently Asked Questions / PHI FAQ 7 |
| 7. May an employee of a Health Care Component (HCC) share PHI with individuals within the HCC or with individuals in another HCC in the University if they request it as part of an audit, quality improvement initiative, or training project? Yes. Disclosures for treatment, payment, or operations (TPO) purposes are always permissible. The disclosure described above would be considered part of the University's operations, so it is permitted under HIPAA.
See: http://ouhsc.edu/hipaa/Policies/Privacy-22_Treatment_Payment_Health_Care_Operations.pdf. In addition, so long as the disclosure is to an authorized individual for TPO, the disclosure need not be limited to individuals within an HCC, nor is patient Authorization required.
Return to FAQ List |
|
TOP ^ |
:
| |||||||||||||
|
|
|
|
 |
|  | |||||||||||
|
Office of Compliance 940 Stanton L. Young Blvd., Room 127 Oklahoma City, Oklahoma 73104 Phone: (405) 271-2511, (866) 836-3150 Fax: (405) 271-1768 |
 |