[ Friday, September 09, 2005 ]
Update on HIPAA and Katrina:
OCR has issued another bulletin
, this time pointing out (among other things) that business associates may also be able to more widely use and disclose PHI under the same authority that covered entities may, depending on how the BAA reads. Also, note 45 CFR 164.510(b)(4), uses and disclosures for disaster relief purposes. That allows a covered entity to use and disclose PHI to private or public entities authorized by law to assist in disaster relief efforts where the disclosure is to outline the location, general condition, or death of the individual subject of the PHI, so long as the covered entity either gets the consent of the individual or otherwise reasonably determines that the individual wouldn't object.
Jeff [4:12 PM]
Blogger: HIPAA Blog - Edit your Template