PII disclosure
The Minimum Necessary Rule within the Privacy Rule requires that any request or distribution of PHI occurs with only the minimum amount of PHI required to complete the intended task. This includes email, fax and physical distribution.
Protected Health Information PHI is information that relates to an individual’s health, healthcare, treatment, or payment for healthcare that identifies the individual. Identification may be by name, social security number or similar information that relates to a specific individual. Information related to Your past health, present health, treatment, diagnosis or conditions is considered to be PHI.
Our staff must comply with applicable requirements under Federal Regulation implementing Section 264 of the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Our staff will communicate PHI to the General Agency, Carriers and/or Plan Sponsors as necessary to administrate the policy including obtaining premium bids, modifying, amending or terminating the Plan. PHI may only be accessed by General Agency, Carriers and/or Plan Sponsor employees or delegated administrators as required for the proper administration of the policy.
Permitted uses and disclosures of PHI by the General Agency, Carriers and/or Plan Sponsors shall provide for the following:
1) General Agency, Carriers and/or Plan Sponsors Sponsor will not use or further disclose PHI, except as permitted by the Plan documents or as required by law, and, if applicable, report to the Plan
any improper disclosures.
2) The General Agency, Carriers and/or Plan Sponsors will not use the information for any employment-related action or in connection with any other benefit plan.
3) The General Agency, Carriers and/or Plan Sponsors will allow individuals access to their own PHI, consider their amendments, and, upon request, provide an accounting of the disclosures made.
4) The General Agency, Carriers and/or Plan Sponsors will ensure its agents and subcontractors agree to similar restrictions.
5) The General Agency, Carriers and/or Plan Sponsors will make its internal practices and records available to the HHS.
6) If feasible, the General Agency, Carriers and/or Plan Sponsors will return or destroy all PHI received from the Plan when such information is no longer needed
|
|