Minimum Necessary Rule. 11.1. In all instances, only the information that is necessary and appropriate may be released. Do not disclose PHI via blog, web site, discussion group, social network, or other public place even when you believe the information is “de-identified” unless the information is reviewed and approved by the Compliance Officer or designee. Posts on social media sites can give enough info for friends and family to recognize patient. Names do not have to be included to be a violation. 11.2. If there is a question as to the appropriate release of information, the employee should contact an Ada County Paramedics Battalion Chief for clarification. If an employee believes that they may have inadvertently released PHI in error, they must notify their supervisor in writing of that disclosure. The Compliance Officer is the custodian of patient records and must authorize release of all PHI generated within this System. All records within the System that contain PHI are to be kept secure at all times and locked up when not being used for legitimate purposes. 11.3. Non-compliance with this policy may follow the disciplinary process.
Appears in 5 contracts
Sources: Joint Powers Agreement, Joint Powers Agreement, Joint Powers Agreement