{"id":4906,"date":"2019-10-28T15:18:52","date_gmt":"2019-10-28T20:18:52","guid":{"rendered":"https:\/\/calliercenter.utdallas.edu\/?post_type=doc&p=4906"},"modified":"2023-10-24T17:39:03","modified_gmt":"2023-10-24T22:39:03","slug":"section-20-request-for-restricting-access-to-phi","status":"publish","type":"doc","link":"https:\/\/calliercenter.utdallas.edu\/doc\/section-20-request-for-restricting-access-to-phi\/","title":{"rendered":"Section 20: Request for Restricting Access to PHI"},"content":{"rendered":"\n
Patients shall have the right to request that the Callier Center restrict its Use and Disclosure of PHI for Payment, Health Care Operations, and Breach Notification Disclosures.<\/p>\n\n\n\n
a. The Center shall permit a Patient to request that the Center restrict (i) its Use and Disclosure of the individual\u2019s PHI for purposes of Payment and Health Care Operations and (ii) its Breach Notification Disclosures concerning the individual.<\/p>\n\n\n\n
b. In accordance with this Manual, a Patient\u2019s Personal Representative has the right to request a restriction to the same extent the Patient has a right under this Section.<\/p>\n\n\n\n
a. The Privacy Officer shall be responsible for receiving and processing a Patient\u2019s request for restriction of the Use and Disclosure of PHI. The Privacy Officer has ultimate authority regarding the disposition of such requests.<\/p>\n\n\n\n
b. The Privacy Officer may agree to comply with such request but is not required to do so, except for requests where the Patient pays for a service or health care item out-of-pocket in full, and requests that that information regarding the services not be shared for the purpose of payment or Center\u2019s operations with the Patient\u2019s health insurer unless a law requires disclosure. The Center can cancel the agreement if the Patient fails to pay the entire amount out of pocket.<\/p>\n\n\n\n
c. The Center shall not agree to a request to restrict Use or Disclosure of PHI unless all of the following requirements are met:<\/p>\n\n\n\n
Provided, however, that the Center reserves the right to not to agree to a request for a restriction even if all of these requirements are met except for requests involving restrictions on the use of information for Payment where the Patient pays for the service or item out-of-pocket in full.<\/p>\n\n\n\n
d. If the Center agrees to an Individual\u2019s request, the Privacy Officer shall:<\/p>\n\n\n\n
e. If the Center denies an individual\u2019s request, the Privacy Officer shall notify the Patient in writing of the denial and the reasons therefor.<\/p>\n\n\n\n
An agreed restriction on Uses and Disclosures of PHI shall be terminated if:<\/p>\n\n\n\n
a. The Patient agrees in writing that the restriction can be terminated; or<\/p>\n\n\n\n
b. The Center gives the Patient written notice that the restriction is terminated without the Patient\u2019s agreement, except that such termination shall be effective only as to PHI received or created by University after the written notice is given.<\/p>\n\n\n\n
a. If a request is granted, the Center shall document (i) the Patient\u2019s request; (ii) notice of the granted request; (iii) any subsequent agreed-upon modifications or revocations of the agreed restriction; and (iv) if the Center modification or revocation is not agreed to by the Patient, any written notification to the Patient of such unilateral modifications or revocations.<\/p>\n\n\n\n
b. If a Patient\u2019s request is denied, the Center shall document both the request and written denial of such request. Any such documentation shall be retained in accordance with this Manual.<\/p>\n\n\n\n
HIPAA Regulatory Citation: 45 CFR \u00a7 164.522(a)<\/p>\n\n\n\n
Effective: 04\/14\/2003
Revised: 05\/26\/2015, 04\/13\/2013
Reviewed: 10\/21\/2022, 03\/24\/2021, 12\/08\/2015<\/p>\n\n\n\n