Search the Community
Showing results for tags 'hipaa'.
Found 3 results
-
I work for a TPA (covered entity), and our legal office has a disagreement over whether we can disclose to the plan subscriber if an adult child is or is not enrolled on the subscriber's (the parent's) plan. I say that their enrollment information is PHI and we need approval from the adult child. Another attorney says it isn't PHI, and we can tell the parent who is enrolled on his/her plan. Please weigh in. -
A contributing employer to a multiemployer welfare fund has received a request from CMS to provide information about its employees for purposes of the CMS data match program. The employer is required by law to provide the requested information. The employer does not have the information, which resides with the multiemployer fund. Under HIPAA, does anyone have any thoughts on whether the fund can provide the information (mostly health plan enrollment information) to the contributing employer without authorization under HIPAA's privacy rules? In the non-multiemployer plan context, the employer can provide the information to CMS under the "required by law" exception (EDIT: the employer is not a covered entity so it need not rely on a HIPAA exception) and the employer, as plan sponsor, can obtain the enrollment information from its group health plan. But a contributing employer is not the plan sponsor of the multiemployer plan so this rationale does not seem applicable. Thanks!
-
Is an authorization to release protected health information that has been executed by a participant/patient itself protected health information that is subject to the privacy rules?
