Anesthesia Coding Alert

Are you complying with these 6 key aspects?

If you’re unsure about when and how you must provide patients with access to their health information, just ask the HHS Office for Civil Rights (OCR) – they have the answers and are willing to share.

In January, OCR released a fact sheet and the first in a series of frequently asked questions (FAQs) to further clarify individuals’ rights under HIPAA to access and obtain copies of their health information. The HIPAA Privacy Rule generally requires covered entities (CEs), including health plans and most healthcare providers, to provide individuals, upon request, with access to their protected health information (PHI).

Do Focus On These Important Areas

This first set of FAQs address the scope of information that HIPAA’s access right covers, as well as the very limited exceptions to this right, the form and format in which you may provide information to individuals, the requirement to provide access in a timely manner, and the intersection of HIPAA’s access right with the requirements for patient access under the Health Information Technology for Economic and Clinical Health (HITECH) Act’s Electronic Health Record (EHR) Incentive Program.

Also, the fact sheet covers key aspects of the right of access provisions, including:

1. What information is included and excluded from the right of access;
2. The rules for requesting access;
3. How you must provide access, including fees you may impose;
4. When you may deny access;
5. How to comply with an individual’s right to direct PHI to another person; and
6. How differing state laws affect the federal regulations.

Watch for more: In the Jan. 7 announcement, OCR said that it will continue to develop additional guidance and other tools on individuals’ right of access. Also, OCR will work with the White House Social and Behavioral Science Team and the HHS Office of the National Coordinator for Health Information Technology (ONC) to produce consumer-friendly resources, including sample communications tools to encourage patients to access their electronic health information.

Don’t Let Some Parts Confuse You

Although the fact sheet and FAQs are generally rather helpful for healthcare entities, some experts believe that certain aspects of the guidance on right of access could cause confusion.

“The guidance has the potential to create confusion … for individuals and healthcare providers to the extent that a state law is more stringent,” warned partner attorney Laurie Cohen in a Jan. 11 blog posting for the law firm Nixon Peabody LLP.

For instance: Under the HIPAA Privacy Rule, a healthcare provider must respond to a request for a copy of health information within 30 days and may charge a reasonable, cost-based fee for such copies, Cohen illustrated. Under New York State law, however, a healthcare facility or practitioner must respond to such a request within 10 days and may impose a reasonable charge for all inspections and copies, not exceeding the incurred costs, and the reasonable charge for paper copies must not exceed $0.75 per page.