Page 61 - Privacy_Program

DP130B.15a (a) any material information in the authorization is known by the organization
to be false;
DP130B.15b (b) the requirements of the authorization have not been filled out completely; or
DP130B.15c (c) the expiration date has passed or the expiration event is known by the
organization to have occurred.
Employees and others DP130B.16 The organization will document and retain the signed authorization for a period
with Access to PHI of at least six years from the date of its creation or the date when it last was in
effect, whichever is later.
DP130B.17 Prior to use or disclosure of PHI in marketing materials including the
organization’s website, print materials, proposals, speeches, and other media;
the organization will obtain authorization from the participant(s) whose
information will be used or disclosed using the organization’s CONSENT TO USE
PERSONAL IMAGES AND DESCRIPTIONS ‐ MEDICAL. See OR‐B‐402 – USE OF
PERSONAL IMAGES AND DESCRIPTIONS.

GES CONFIDENTIAL 57