Doug,
Thanks for the clairication for your organization.
Since the Privacy Rule requires we document and retain any signed
authorization as required by ยง 164.530(j)..for six years from the date of
its creation or the date when it last was in effect, whichever is later, we
have elected to store
Title: Message
Read 45 164.502 uses and disclosures of protected health
information: general rules:(i) "Standard: Uses and disclosures
consistent with notice. A covered entity that is required by 164.520 [the
section addressing the notice of privacy practices] to have a notice may not use or
Title: Message
The
disclosures I had referenced in my earlier email posting are permissible
disclosures (disclosures for audit purposes are allowed by HIPAA). I did not
mean to imply that all accounting can be avoided as the notice should address
typical uses of PHI for a CE.
In general
