{"id":4900,"date":"2019-10-28T15:11:21","date_gmt":"2019-10-28T20:11:21","guid":{"rendered":"https:\/\/calliercenter.utdallas.edu\/?post_type=doc&p=4900"},"modified":"2023-10-24T17:20:31","modified_gmt":"2023-10-24T22:20:31","slug":"section-18-patient-access-to-protected-health-information","status":"publish","type":"doc","link":"https:\/\/calliercenter.utdallas.edu\/doc\/section-18-patient-access-to-protected-health-information\/","title":{"rendered":"Section 18: Patient Access to Protected Health Information"},"content":{"rendered":"\n
UT Dallas Callier Center recognizes a Patient\u2019s right to inspect and\/or obtain copies of his or her own PHI contained in a Designated Record Set, to the extent the Patient is entitled to such access. This right is separate from any right an individual may have to request records through the Texas Public Information Act.<\/p>\n\n\n\n
a. Patients requesting an opportunity to inspect and\/or obtain copies of their PHI shall submit a written request to the Privacy Officer to review or have the Callier Center disclose their PHI to a third party pursuant to the Individual\u2019s rights under HIPAA.\u00a0Request for Access Form (English<\/a>\/Spanish<\/a>)<\/p>\n\n\n\n b. A Patient shall have access to PHI for as long as it is maintained in a Designated Record Set, subject to this section. The Privacy Officer shall be responsible for receiving and processing requests for access by Patients. The Privacy Officer shall have ultimate authority regarding whether such requests shall be granted or denied.<\/p>\n\n\n\n a. Before PHI is released under this section, the requesting person\u2019s identity shall be verified in accordance with Section 17 of this Manual.<\/p>\n\n\n\n b. A Patient\u2019s Personal Representative shall have the right to access PHI to the same extent that the individual has such right under this section.<\/p>\n\n\n\n The Callier Center shall provide access or a written denial to the Designated Record Set, as applicable, in response to an individual\u2019s request for access within 30 days of the Privacy Officer\u2019s receipt of the request, unless:<\/p>\n\n\n\n a. the PHI is maintained off-site (including records held by a Business Associate), in which case access or written denial must be provided within 30 days; or<\/p>\n\n\n\n b. System extends the deadline by providing the individual, within the 30-day, as applicable, a written statement of the reasons for the delay and the date by which action on the request will be completed, but in no case may this extension be for more than 30 days. System is allowed only one extension for a decision on a request for access.<\/p>\n\n\n\n a. If an individual makes a valid request for access to some or all of the requested PHI, such access shall be provided as follows:<\/p>\n\n\n\n b. If access to PHI is granted in part and denied in part, the Center shall provide access to the PHI, excluding (through redaction) the PHI for which access has been denied.<\/p>\n\n\n\n c. Callier Center shall charge a reasonable cost-based fee for providing access\/copies, which includes (i) the cost of copying (supplies and labor), (ii) postage, and (iii) the cost of preparing a summary or explanation (if applicable) if the individual agrees to a charge in advance.<\/p>\n\n\n\n a. Access to PHI may be denied if:<\/p>\n\n\n\n b. It is expected that the exceptions to open access will be employed rarely. The reasons for denial listed set forth in paragraphs (a)(i)-(iv) are not reviewable. Reasons for denial listed in paragraphs (a)(v)-(vii) may be reviewed in accordance with this Section 18.<\/p>\n\n\n\n If access is to be denied in part or in whole, the Callier Center shall provide written notice, in plain language and within the timeframes established by this Section, to the requesting person of the following:<\/p>\n\n\n\n a. the specific grounds for the denial;<\/p>\n\n\n\n b. a Patient\u2019s right to protest the denial to the Privacy Officer and to the Secretary and the name or title and phone number of the Privacy Officer, as well as a contact source for the Secretary;<\/p>\n\n\n\n c. if the denial is reviewable, a Patient has the right to request that a licensed health care provider, designated by UT Dallas, who did not participate in the initial decision to deny access will review the denial (the Patient may exercise this right by notifying the Privacy Officer in writing); and<\/p>\n\n\n\n d. if the PHI is not in a University Designated Record Set but the University knows where the information is maintained, the Patient should be directed there to make a request for access.<\/p>\n\n\n\n a. If a Patient is entitled to, and has requested, review of a denial of access, the Center shall designate a licensed health care professional who was not directly involved in the decision to deny access to be the designated reviewer and shall promptly refer such request to that reviewer. The reviewer shall determine within a reasonable period of time whether to deny access based upon the criteria listed in this section. The decision of the official shall be final.<\/p>\n\n\n\n b. The University shall promptly notify the individual in writing of the determination of the reviewer, and if the reviewer finds that the individual should be given access to inspect and\/or copy the PHI, the Center shall provide that access as described in this section.<\/p>\n\n\n\n The Center shall retain documentation of the Designated Record Sets that are subject to access by individuals in paper or electronic form in accordance with this Manual.<\/p>\n\n\n\n For each request, as applicable, the Center shall retain (i) the written request for access; (ii) any written response to the request including a notice of deadline extension (if any); (iii) if the request is denied, any written request for review, if any, and written notice of the reviewer\u2019s determination upon review; and (iv) if the request is granted, a description of how access was provided and any summaries or explanations prepared by the Center.<\/p>\n\n\n\n HIPAA Regulatory Citation: 45 CFR \u00a7 164.524(a) Effective: 04\/14\/2003\n
Verification of Requestor\u2019s Identity<\/strong><\/h2>\n\n\n\n
Time Period for Providing Access<\/strong><\/h2>\n\n\n\n
Providing Access<\/strong><\/h2>\n\n\n\n
\n
Denial of Access to PHI<\/strong><\/h2>\n\n\n\n
\n
Notice of Denial<\/strong><\/h2>\n\n\n\n
Review of Denials<\/strong><\/h2>\n\n\n\n
Document Retention<\/strong><\/h2>\n\n\n\n
Revised: 05\/26\/2015, 03\/13\/2013
Reviewed: 10\/21\/2022, 03\/24\/2021, 08\/13\/2015<\/p>\n\n\n\n