Attached is a checklist that may be helpful when determining if an authorization is valid in regards to the requirements of the Privacy Rule for an authorized disclosure. To review the requirements for the content of an authorization in the Privacy Rule and all associated discussion, comments, and responses found in the preambles to the NPRM, the Final Privacy Rule and the August 2002 Revisions to the Final Privacy Rule you may want to go to http://www.bricker.com/legalservices/practice/hcare/hipaa/164.508a.asp
I combined core element 6 (signature and date of the individual) with core element 7 (if signed by a personal representative, a description of his or her authority to act for the individual) as I view this as an either/or element and combined them for brevity (and to fit it one 1 page). So the attached document shows 6 core elements, whereas the rule requires 7 core elements. This checklist might be used to assist the CE in determining if their authorization is valid, or to determine if an authorization received meets the requirements. It might also be used to send to a person or entity that has provided an invalid authorization to explain why the authorization was not accepted.
Barbara McGowin, CPC
Executive Recruiter
HIT Recruiting
(843) 824-8537
mcgowins@...
Connecting Healthcare Organizations with People,
Products and Services to Achieve HIPAA Compliance.
Executive Recruiter
HIT Recruiting
(843) 824-8537
mcgowins@...
Connecting Healthcare Organizations with People,
Products and Services to Achieve HIPAA Compliance.