Institute:Office of National Coordinator (ONC) Workforce Training Curriculum
Component:The Culture of Health Care
Unit:Privacy, Confidentiality, and Security
Lecture:HIPAA Privacy Rule
Slide content:Authorizations Must Include Names of authorized persons making use of disclosure Description of information Expiration of date of event Patients right to revoke and instructions on how to do so Purpose of use or disclosure Signature and date 14
Slide notes:Authorizations must include the following: The names of authorized persons making use of or disclosing the information The description of the information An expiration date so the authorization does not last into perpetuity Instructions on the patients right to revoke the authorization and how to do so A statement of the specific purpose of use or disclosure, and A signature and date by the patient Additional information may be required for designated restricted or sensitive health information, as described by federal and state law, such as with behavioral health and mental health information and records, developmental disability patient health information, and records on alcohol or other substance abuse patient health information or records. 14