100-8         HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPAA)

 

The Health Insurance Portability and Accountability Act provides individuals with certain rights about how their health care information is used and disclosed.  HIPAA:

 

 

HIPAA also requires DPA Division of Public Assistance to ensure the confidentiality and security of an individual’s health care information.

 

Please contact the DPA Division of Public Assistance Privacy Official at 465-3347 or the DHSS Department of Health and Social Services Privacy Official at (907) 465-4722 with any concerns or questions you have regarding information privacy, security or access.

 

100-8 A.     PROTECTED HEALTH INFORMATION

 

Information that is protected by HIPAA includes any information about an individual’s medical or mental health condition.  It also includes all information related to health care eligibility, claims, and billing and payment information.

 

100-8 B.     PRIVACY NOTICE

 

DPA Division of Public Assistance is required to give individuals a Notice of Privacy Practices explaining their rights under HIPAA.  The notice is automatically sent to all Medicaid and CAMA Chronic and Acute medical Assistance applicants when benefits are authorized.  In addition, EIS Eligibility Information System sends a Privacy Notice to all Medicaid and CAMA Chronic and Acute medical Assistance recipients at least once every three years.  An electronic version of this privacy notice is also available at http://health.hss.state.ak.us/das/is/hipaa/pdfs/privatehealthcareinfo.pdf

 

100-8 C.     AUTHORIZATION FOR RELEASE OF PROTECTED HEALTH INFORMATION FORM GEN 150

 

In the administration of its programs, DPA Division of Public Assistance gathers and discloses medical and mental health information. To insure compliance with HIPAA Health Insurance Portability and Accountability Act requirements, DPA Division of Public Assistance designed a specific Authorization for Release of Protected Health Information form (Gen 150).

 

This form must be used when gathering or disclosing information from/to health care providers.  A separate form must be used for each provider and must identify the specific information requested.

 

A copy of the signed authorization must be kept in the client’s case file, and a copy given to the client.

 

100-8 D.     GATHERING MEDICAL INFORMATION

 

A  signed Gen 150 form must accompany each of the following forms when requesting information from health care providers:

 

 

100-8 E.     DISCLOSING MEDICAL INFORMATION

 

Health information may be shared between the Division and it’s contractors and grantees when it is necessary for the administration of our programs or the delivery of services to clients.  For example, if a case manager receives medical information on a TA Temporary Assistance -10, they may share that information with the eligibility worker to ensure that a work activity exemption is properly coded.  A separate authorization is not needed for this exchange since contractors and grantees are agents of the Division.

 

However, any disclosure or exchange of medical information outside the Division requires a signed authorization from the client.  For example, if a client is referred to the Division of Vocational Rehabilitation for services, a completed  06-5870 is needed before disclosing any medical information regarding the reason for the referral.

 

100-8 F.     REVOCATION

 

An individual may revoke an authorization at any time by completing the Revocation Section on the back of the authorization form.  Any exchanges of medical information made before the authorization is revoked are not affected by the revocation.

 

 

Previous Section

 

Next Section

 

 

2008-01 (6/08)