For example, your HIPAA authorization form should be written in simple, plain language and include the following: Some things are not protected by HIPAA. For example, if you are exposed to an infectious disease, a doctor may need to notify the appropriate authorities or health authorities. Or, when information is requested by local, state, or federal agencies. For a release form to be legally valid, it must inform the patient of the following: The authorization form must be written in plain language to ensure that it is easy to understand and must contain at least the following: If someone has access to your information, you are always protected. Healthcare providers use the “minimum necessary” standard and only share the information necessary to achieve the specific goal. The forms provided here are just a few of the new administrative measures that HIPAA will require. There are other forms (for example, a commercial partnership agreement) and other work that must be completed by April 14, 2003. If you need assistance, WADA and AAFP offer affordable step-by-step instructions on how to implement the Privacy Rule (see www.ama-assn.org/ama/pub/category/8910.html or www.aafp.org/online/en/home/practicemgt/regulatory-compliance/hipaa.html for more information).
• The patient has the right to revoke an authorization at any time.• Authorization forms are completely voluntary.• The person to whom you entrust your information may share it with someone else. Creating a HIPAA permission avoids this by allowing certain people to receive health information so they can stay informed about your condition and make medical decisions on your behalf. HIPAA gives patients several new rights, including better access and control over their medical records. (For more information about HIPAA, see “The HIPAA Privacy Rule: Answers to Frequently Asked Questions,” FPM, November/December 2002, page 35, and in the box on page 30.) Organizations that are considered HIPAA companies are required to inform patients of new privacy rights and their privacy policies and procedures (to determine if you are a covered entity, see www.cms.hhs.gov/hipaa/hipaa2/support/tools/decisionsupport/default.asp). While taking the time to fill out an authorization form and get a patient`s signature is an extra step, it`s an important step you can`t miss. In addition, patient privacy rights should be at the forefront of everything your organization does. The HIPAA approval form must also include the following information: If you have questions about HIPAA consent forms or HIPAA training, contact the experts at MedSafe. MedSafe is the nation`s leading one-stop resource for outsourced healthcare accreditation and compliance solutions. For more than 20 years, we have been ensuring the safety of hospital groups, private practices and their business partners. Our suite of on-premises and online services, including OSHA, HIPAA, enterprise compliance, and code auditing, equips your firm with the tools and capabilities to achieve and maintain regulatory compliance and billing. MedSafe takes a hands-on approach and works directly with your team to uncover problems and define appropriate solutions.