: HOME  |  Privacy Policies  |  Frequently Asked Questions  |  Training

Privacy Forms - Clinics |  Privacy Information - Patients  

   Additional Information  |  Contact Information


YOU ARE HERE : HOME / HIPAA Frequently Asked Questions / PHI FAQ 7
7. May an employee of a Health Care Component (HCC) share PHI with individuals within the HCC or with individuals in another HCC in the University if they request it as part of an audit, quality improvement initiative, or training project?

Yes. Disclosures for treatment, payment, or operations (TPO) purposes are always permissible. The disclosure described above would be considered part of the University's operations, so it is permitted under HIPAA.

See: http://ouhsc.edu/hipaa/Policies/Privacy-22_Treatment_Payment_Health_Care_Operations.pdf.
 
In addition, so long as the disclosure is to an authorized individual for TPO, the disclosure need not be limited to individuals within an HCC, nor is patient Authorization required.

Return to FAQ List
TOP ^  
:
Home Privacy Policies Frequently Asked Questions Privacy Forms - Clinics Privacy Information - Patients
Training Additional Information Contact Information



The University of Oklahoma Health Sciences Center
OUHSC HOME / SEARCH / FEEDBACK

Office of Compliance
755 Research Parkway
Suite 429
Oklahoma City, Oklahoma 73104
Phone: (405) 271-2511, (866) 836-3150
Fax: (405) 271-5545
    
Copyright © 2014 The Board of Regents of the University of Oklahoma, All Rights Reserved.
Disclaimer | Copyright