| Authorization: A document signed by the client or client's legal/personal representative to give DMH permission to use PHI for specified purposes other than treatment, payment, or health care operations or to disclose PHI to a third party.
Disclosure: The release, transfer, provision of access to, or divulgence in any manner of information outside the entity holding the information.
Personal Identifiable Information (PII): Data relating directly or indirectly to an individual, from which the identity of the individual can be determined (e.g., client names, addresses, phone numbers, Social Security numbers, and bank account numbers).
Protected Health Information (PHI): Individually identifiable health information maintained or transmitted by DMH in any form or medium, relating to the past, present, or future physical or mental health condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual.
Marketing: Communication that encourages clients to purchase or use a product or service.
Use: The sharing, employment, application, utilization, examination, or analysis of PHI within DMH.
|
| DMH workforce members shall obtain written authorization before using and disclosing PHI for purposes other than treatment, payment, or mental health care coordination, except as permitted by the HIPAA Privacy Rule.
Use and disclosure of an individual’s PHI shall be consistent with the valid authorization obtained from that client.
When DMH initiates a disclosure of PHI, DMH shall provide the signed Authorization for Use or Disclosure of PHI (MH 602). - If the client requests the disclosure of PHI, DMH shall establish the identity of the requestor in accordance with DMH Policy 500.06.
|
