Manual: HIPAA Guidelines Policy and Procedure Manual for Healthcare Organizations (Ver 3.2) External Reference: "(HIPAA §164.502(d), 164.504(e), 164.514(a) - 164.514(c))"
As the health care industry's most comprehensive library of customizable policy and procedure templates, MCN Healthcare's HIPAA Guidelines Policy and Procedure Manual for Healthcare Organizations includes this customizable template, Uses and Disclosures of Protected Health Information - De Identifying and Re-Identifying Protected Health Information. MCN's policy library helps you meet compliance with Joint Commission and federal regulations including CMS, CDC, OSHA, OIG, HIPAA and more. MCN provides more than 80 health care specific policy and procedure manuals for Acute Care Hospitals, Ambulatory Care, Behavioral Health, Home Health, Physician Practice, and Long Term Care. MCN's policy and procedure manuals focus on the latest healthcare "hot topic" issues related to patient safety and prevention of medical healthcare errors. Here is some sample content from Uses and Disclosures of Protected Health Information - De Identifying and Re-Identifying Protected Health Information:
| | POLICY:
may use protected health information to create information that is not individually identifiable health information, or disclose protected health information only to a business associate for such purpose whether or not the organization needs to use the de-identified information.
shall accept information that has been de-identified as being not individually identifiable health information and to have a method to re-identify healthcare information that has been de-identified.
shall remove personal identifiers from protected health information to the extent possible, while... |
| Second excerpt: |
| | ...all zip codes with the same three 3 initial digits contains more than 20,000 people; and
The initial three 3 digits of a zip code for all geographic units containing 20,000 or fewer people is changed to 000.
All elements of dates except year:
Birth date, admission date, discharge date, date of death
For all ages over 89, all elements of the dates including year are to be de-identified, unless the information can be classified into a single category, such as age 90 or older
... |
|