A. Information may be released in written and/or verbal form.

The release of information will occur upon receipt of an authorization determined as valid. Validity is determined by the presence of each of the following items:

1. The name of the person about whom information is to be released, including social security number.

2. The specific content of the information that is to be released

3. The person to whom the information is to be released.

4. The signature of the person who is legally authorized to sign the release and the date on which the release is signed.

5. The expiration date of the authorization, not to exceed one year.

6. Information that defines how and when the authorization can be revoked.

B. Requests for Information:

1. All requests for information will be in writing.

2. Requests for information from an individual’s record will be answered within 30 days from the date of receipt. If the information cannot be provided within this period, the requester will be informed in writing of the reasons for the delay and the anticipated date the information will be available.

3. Requests for records that have been incorporated into Parker Psychiatric Services records from outside sources will not be released and the requestor will be encouraged to seek those records from their original source.

C. Release of Sensitive Information:

1. Information contained within the individual records may have a serious adverse effect on an individual’s mental or physical health if disclosed to the individual. Such information may contain materials requiring an explanation or interpretation to assist in its acceptance and/or assimilation in order to avoid an adverse impact on the individual’s health. To minimize the risk of a release of information adversely impacting a person served, the following guidelines will apply:

1. The HIPAA Compliance Officer will review all requests of individuals seeking direct access to their records. Information identified as potentially sensitive will be reviewed by the Chief Executive Officer. This review will occur within one working day of the referral.

2. All materials directly related to behavioral health treatment that includes a diagnosis, assessment, or interpretative data will be reviewed by the HIPAA Compliance Officer.

3. If after the professional review of the record, it is believed that disclosure of the information directly to the individual could have an adverse effect on that individual, arrangements will be made to disclose the information to a professional staff member selected by the individual. The staff member will discuss the information with the individual prior to the release.

4. Should it be determined by the professional staff member that after a careful and conscientious explanation of the information to the individual has been made, and it is the opinion that access to the information could be harmful, physical access will be denied. The justification for making the denial will be fully documented by the staff member and final concurrence will be made by the Chief Executive Officer. The individual will be advised of the denial, the reasons for the denial of the request, and advised of the right to file a grievance, should the individual disagree with the decision.

D. Parker Psychiatric Service’s legal counsel and liability Insurance carrier will be notified and consulted when the release of information involves the following circumstances:

1. Any request for records that are to be used in a suit against the organization or in a prosecution against a person served.

2. For all subpoenas for records that were not accompanied by a written consent signed by the person served. Chief Executive Officer will file a motion to quash with the Court which issued the subpoena. If that fails Parker Psychiatric Service legal counsel will be consulted.

3. All requests for information which indicates a possible liability for the cost of care and services.

E. Information may be released without the consent of persons served under the following conditions:

1. For use by any employee of Parker Psychiatric Services who has a need for the information in the performance of their duties to ensure continuity of care.

2. To medical personnel who have a need for the information for the purpose of treating a condition which poses an immediate threat to the health of a person served.

3. To public health authorities related to infection with HIV when there is a written request that the information and there is a fine or penalty for failure to comply.

4. To recover or collect the costs of medical care from third party health care insurance carriers contracted with by the persons served and required by the health plan to be disclosed.

5. To Federal, State, or local government agencies or entities charged under applicable laws with the protection of public health and safety. In such cases, the information may be release with the consent of the individual whose records are being requested, or upon receipt of a written request from the head of the government entity. A request for release under these circumstances may be either a standing written requested based on reporting requirements, or a specific written request from the head of a law enforcement agency for a special law enforcement purpose. Standing requests must be updated in writing every year.

6. Disclosure as a result of a court order from a court of competent jurisdiction.

7. To the Medical Examiner, in conjunction with an investigation of a suspicious death.

8. To professional review organizations, in accordance with government contracts (Medicare/Medicaid).

9. Disclosure of information to a third party payer in a care cost recovery action will be limited to date of birth; social security number; payment history; and account number, unless the individual provides a written consent designating further information to be released.

F. An accounting record will be maintained on all records released by Parker Psychiatric Services.

It will include the date, nature and purpose of each disclosure, the name of the party to whom the disclosure is made. This accounting record will be maintained in the record from which the disclosure was made. In addition, a logbook will be maintained for all release of information for data reporting purposes.

G. Special consent is required to release records that contain information related to drug and alcohol addiction and abuse, and tests for, or infection with human immune virus.

Any authorized disclosure from records containing information of this type will be limited to that information which is necessary for the purpose of the disclosure. Because of the special nature of this information, the release must be processed by the Chief Executive Officer to assure compliance with the special regulatory requirements.

H. The following type of communications do not constitute disclosure of information/records:

1. Communication of information between any Parker Psychiatric Services employees who have a need for the information in connection with their official duties.

2. Communications with law enforcement offices which are directly related to the person served committing or threatening to commit a crime on the organization’s property or against an employee of the organization.

3. Communication of information which does not provide an individual’s identifying information.

I. Parker Psychiatric Services will protect the confidentiality of private health care information when transferring data electronically by adherence to the following guidelines:

1. All data sets containing individual names transferred on a diskette, e-mail or any other electronic medium, will be password encrypted.

2. The sending and receiving parties prior to transfer of the electronic data will negotiate passwords.

3. Passwords will be at least eight characters in length, contain both letters and numbers, and must not be commonly used words.

4. Passwords for encrypted files may not be mailed in the same shipping package as the encrypted file.

J. Parker Psychiatric Services will adhere to the following guidelines when mailing confidential private health information:

1. Stamp all envelopes containing records as confidential.

2. Clearly indicate a particular office on the address where the envelope is to be delivered.

3. Whenever possible, include in the address the name of the staff member authorized to open the envelope

4. All envelopes individually addressed will contain the following statement in the outside of the envelope: “TO BE OPENED BY ADDRESSEE ONLY”.

K. When faxing confidential information, the following guidelines will apply:

1. Confidential private health information will only be transmitted by fax when absolutely necessary or required by the requestor, and other traditional methods such as confidential mail is not possible to deliver the information.

2. All fax cover pages for confidential information will contain the following:

   1. The name and program of the person to whom the fax is intended.

   2. The name, program, and phone number of the person sending the fax.

   3. The statement “Confidential Information” in a large bold font.

   4. A statement that clearly identifies the accompanying material as confidential information that reads as follows: “The documents accompanying this facsimile transmission contain confidential information which is legally privileged. The information is intended only for the use of the recipient named above. If you have received this facsimile in error, please immediately notify us by telephone to arrange for return of the documents to us, and that you are hereby notified that and disclosure, copying, distribution or the taking of any action in reliance on the contents of this facsimile information is strictly prohibited.”

3. In situations where the information is not being regularly faxed to a common organization and individual, a phone call will be made to the person receiving the fax to verify the fax number and a follow-up call will be made to ensure the receipt of the fax.

4. Fax transmissions will be restricted to persons specifically authorized to transmit confidential information.

5. Fax machines will not be situated in common public areas.

6. Fax number lists will be current, accurate, and regularly checked.

7. All transmission records will be checked to detect possible transmission errors and retained for confirmation purposes.

8. Upon the receipt of any confidential misdirected fax, the sender will be contacted and the information will be shredded.

L. Any information released verbally over the phone, can only be done after verification of the caller’s identity through taking the phone number and making a call back prior to releasing the information.

M. All telephone calls from outside the organization that request confirmation of an individual being served by will be handled by repeating the following statement: “I can neither confirm or deny that the individual in question is receiving services or has ever received services without a written authorization from that individual.”

N. Any Parker Psychiatric Services employee who knowingly and/or willfully violates provisions of this policy and procedures will face administrative disciplinary action that may result in termination of employment.