Page 57 - Privacy_Program

Director of Information DP120A.4b.vii • uses and disclosures about decedents;
Technology, Privacy and
Data Security
Director of Information DP120A.4b.viii • uses and disclosures for cadaveric organ, eye or tissue donation purposes;
Technology, Privacy and
Data Security
Director of Information DP120A.4b.ix • uses and disclosures for research purposes;
Technology, Privacy and
Data Security
Director of Information DP120A.4b.x • uses and disclosures to avert a serious threat to health or safety;
Technology, Privacy and
Data Security
Director of Information DP120A.4b.xi • uses and disclosures for specialized government functions; and
Technology, Privacy and
Data Security
Director of Information DP120A.4b.xii • disclosures for workers compensation.
Technology, Privacy and
Data Security
Director of Information DP120A.5 If a use or disclosure described in parts 5 and 6 of this procedure is prohibited or
Technology, Privacy and materially limited by other laws, the description of the disclosure must reflect the
Data Security more stringent law.
Director of Information DP120A.6 The notice must also contain the following statements or information:
Technology, Privacy and
Data Security
Director of Information DP120A.6a (a) a statement indicating other uses and disclosures will be made only with the
Technology, Privacy and individual's written authorization and that the individual may revoke such
Data Security authorization as permitted by the individual's rights under HIPAA;
Director of Information DP120A.6b (b) a statement of the individual’s rights with respect to PHI and a brief
Technology, Privacy and description of how the individual may exercise those rights:
Data Security

Director of Information DP120A.6b.i • the right to request restrictions on certain uses and disclosures of PHI;
Technology, Privacy and
Data Security

Director of Information DP120A. 6b.ii • a statement that the organization is not required to agree to a requested
Technology, Privacy and restriction;
Data Security
Director of Information DP120A. 6b.iii • the individual's right to receive confidential communications of PHI, as
Technology, Privacy and applicable;
Data Security
Director of Information DP120A. 6b.iv • a statement and a brief description of how the individual may exercise
Technology, Privacy and his/her right to inspect, copy, amend, and receive an accounting of
Data Security disclosure of PHI;
Director of Information DP120A. 6b.v • a statement and a brief description of how the individual may exercise
Technology, Privacy and his/her right to obtain a paper copy of the notice from the covered entity,
Data Security even if the individual has agreed to receive the notice electronically;

Director of Information DP120A.6c (c) a statement that the covered entity is required by law to maintain the privacy
Technology, Privacy and of PHI and to provide individuals with notice of its legal duties and privacy
Data Security practices with respect to PHI;

GES CONFIDENTIAL 53