pricesiop.blogg.se

Dates such as date of birth, admission, discharge, or service.Limited data sets may include only the following identifiers: A limited data set may be disclosed to an outside party without a patient’s authorization only if the purpose of the disclosure is for research, public health, or health care operations purposes and the person or entity receiving the information signs a data use agreement (DUA) with the covered entity or its business associate. What is a limited data set?Ī limited data set is a data set that is stripped of certain direct identifiers specified in the Privacy Rule. If these efforts are unsuccessful, Stanford would be required to cease any further disclosures of PHI to the recipient under the DUA and report the matter to the federal Department of Health and Human Services Office for Civil Rights. For example, if Stanford learns that data it provided to a recipient is being used in a manner not authorized under the DUA, Stanford should work with the recipient to correct this problem. Prohibit the recipient from identifying the information or contacting the individuals.Īdditionally, covered entities such as Stanford must take all reasonable steps to cure a recipient's breach of the DUA.Require the recipients to ensure that any agents (including any subcontractors) to whom it discloses the information will agree to the same restrictions as provided in the agreement and Require the recipient to report to the covered entity any use or disclosure to which it becomes aware Require the recipient to use appropriate safeguards to prevent an unauthorized use or disclosure not contemplated by the agreement Prohibit the recipient from using or further disclosing the information, except as permitted by the agreement or as otherwise permitted by law Identify who may use or receive the information

A limited data set is still protected health information (PHI), and for that reason, covered entities like Stanford must enter into a data use agreement with any recipient of a limited data set from Stanford.Īt a minimum, any DUA must contain provisions that address the following:Įstablish the permitted uses and disclosures of the limited data set Request Electronic Access To Stanford AccountsĪ data use agreement (DUA) is an agreement that is required under the Privacy Rule and must be entered into before there is any use or disclosure of a limited data set (defined below) to an outside institution or party.Data De-identification Overview and Guidance.Guidance on PHI/PII Records Retention and Storage.