Confidentiality, Privacy and Security

Sensitive Information paragraph on ROI

  • 1.  Sensitive Information paragraph on ROI

    Posted 08-14-2019 13:30
    Hi All,

    Is it a requirement to include the sensitive information paragraph on an ROI?

    SPECIFIC AUTHORIZATION: I understand that the information in my health record MAY INCLUDE information that is related to sexually transmitted disease, acquired immunodeficiency syndrome (AIDS), or human immunodeficiency virus (HIV), behavioral or mental health services, and/or treatment for alcohol and/or drug abuse. My signature below authorizes release of all such information. DO NOT INCLUDE INFORMATION STATED ABOVE. ___________________ (Initials).

    Is it a requirement that we must give the patient the option to "include" or "not include" the sensitive information when processing an ROI to a third party? We receive some ROI's that do not give the patient the option of redaction. The authorization indicates patient understands those items may be included in their record. Period. We also receive ROI's from facilities that do not mention the sensitive information items at all. In that case, we are currently redacting, and sending a cover letter advising their ROI did not authorize release of sensitive information.

    Also, in redacting, if we redact, for instance, the diagnosis of HIV, but not that patient is taking Truvada listed under medications, would that be a violation of HIPAA? HIM staff do not necessarily know what medications are for.

    We would appreciate all input from others as to how your office handles this specific item of the ROI.

    Thank you so much!

    Carol Taber
    Health Information Coordinator Ii

  • 2.  RE: Sensitive Information paragraph on ROI

    Posted 09-12-2019 14:20
    Regarding the Specific Authorization statement, you may want to check your state regulations.  Often that's where I see this type of requirement.  As for redacting, I have never had to do that before but my guess is that you would need to remove the medication.  If the HIM staff do not know the medications and what they are used to treat, you may want to consult someone with a clinical background.

    DeAnn Tucker
    HIM Director & Privacy Officer
    Houston Physicians' Hospital