Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
access_of_health_information [2016/03/31 11:38] jillian_nadette_de_leon |
access_of_health_information [2016/06/21 00:40] jillian_nadette_de_leon |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ##ACCESS OF HEALTH INFORMATION | ##ACCESS OF HEALTH INFORMATION | ||
| - | **Access of PHCP, Secondary Health Care Provider, Health Facilities**\\ | + | **Access of Health Care Providers**\\ |
| - | *Health facilities shall clearly define access rights and user roles of staff to ensure that only appropriate people have access to the minimum necessary protected health information. The Health Facility shall create policies and procedures to specify the groups and positions that need to access health information to perform their job responsibilities, as well as the types of health information to which they need access. The Chief of Health Facility shall issue a memorandum containing the list of names and information stated in the preceding statement and a copy shall be furnished to the DOH Central Office.\\ | + | * Upon patient consent, only the health care provider shall have access to the patient's health information and read-only access shall be given to secondary health care providers. \\ |
| - | *Upon patient consent, only the attending physician shall have access to the patient's information and read-only access shall be given to secondary health care providers.\\ | + | |
| *Accessible information for secondary healthcare providers shall be the following:\\ | *Accessible information for secondary healthcare providers shall be the following:\\ | ||
| | | ||
| Line 19: | Line 19: | ||
| | | ||
| **Access of User/Patient**\\ | **Access of User/Patient**\\ | ||
| - | * Consenting patients shall have rights to access, view, request amendments to, and request restriction over how their health information is used. The health facility shall ensure that disclosures and any subsequent changes are documented. | + | * Consenting patients shall have rights to access, view, request amendments to, and request restriction over how their health information is used. The health facility shall ensure that disclosures and any subsequent changes are documented. Health care providers shall be notified once update has been done.\\ |
| * Patients who gave consent for their information to be processed in PHIE shall have the preference to choose which portal provider to use and shall have access to their own record even if their doctors are not yet enrolled in PHIE.\\ | * Patients who gave consent for their information to be processed in PHIE shall have the preference to choose which portal provider to use and shall have access to their own record even if their doctors are not yet enrolled in PHIE.\\ | ||
| * For child- joint parental authority, either parent or legal guardian if one has been appointed can have access to the child's health information. If separated, the one granted legal custody, or legal guardian if one has been appointed by court will have the right to access. \\ | * For child- joint parental authority, either parent or legal guardian if one has been appointed can have access to the child's health information. If separated, the one granted legal custody, or legal guardian if one has been appointed by court will have the right to access. \\ | ||
| **Access of Third Party**\\ | **Access of Third Party**\\ | ||
| - | * A "third party" in relation to personal data, means any person other than-\\ | + | * A third party is allowed access to health information that is provided in the contract with the health care provider or as required by law. |
| - | (a) the data subject, \\ | + | |
| - | (b) the data controller, or\\ | + | |
| - | (c) any data processor or other person authorized to process data for the data controller or processor. | + | |
| - | * Patient's medical record shall not be accessible for case study purposes.\\ | + | |
| - | * Provisions regarding access of third party providers which use applications that are hosted in their cloud service shall be provided. Accountability of third party providers shall be made explicit. | + | |
| //__Notes re: Third Party Relationships__//\\ | //__Notes re: Third Party Relationships__//\\ | ||
| Line 43: | Line 38: | ||
| (c) An expiration date.\\ | (c) An expiration date.\\ | ||
| (d) The purpose which the health information may be used or disclosed. \\ | (d) The purpose which the health information may be used or disclosed. \\ | ||
| - | * A protocol on how to identify authorized persons to access patient information shall be made.\\ | + | * A protocol on how to identify authorized persons to access patient information shall be made. The authorized person approving the request to access health information shall ensure that proper authorization from proper authorities is obtained by the requesting party. \\ |
| * In cases when the person requesting for information is incapacitated, special power of attorney shall be allowed.\\ | * In cases when the person requesting for information is incapacitated, special power of attorney shall be allowed.\\ | ||