Confidentiality Policy

Confidentiality In Patient Care

 Policy & Procedure III.10   

The client has their right to expect that all aspects of care will be treated as confidential.

-   Licensed Practical Nurses, Registered Nurses, Nurse Practitioners            and physicians giving direct care may read, write and/or                              electronically produce data on the client’s electronic medical record          or paper record.
-   Privacy is established for clients when examining, interviewing, or            sharing information by closing the door.
-   Verbalization of client’s information is not shared with those not                participating in the client’s care unless the patient has given written          or verbal consent.
-   Discretion is used in the exchange of client information on the telephone. Clients must use identifiers, such as,          name, ID #, and date of birth (DOB) to enable nurse or provider to share sensitive information over the telephone.
-   Discretion is used to maintain confidentiality during meetings, at other clinic locations and events. 


Confidentiality of Patient Medical Records in Compliance with HIPAA

Policy & Procedure IV.3

-   Confidential information in the medical record is considered privileged information         and cannot be released without the client’s written authorization. Confidentiality is         to be broken only if the patient poses a danger to self or to others. Confidential               information is considered to be all diagnostic and clinical data.

-   The guarantee of confidentiality in a privileged relationship helps assure that the             client will not withhold information critical to his/her care.

-   Those employees with access to medical information shall respect the doctrine of           confidentiality and not divulge any information contained in the medical record               unless they are authorized to do so by the client.


-   The release of information requires the client’s written authorization.

    *  Authorization is required for the release of information to:

           a. Physicians and nurse practitioners not on Student Health Clinic staff who are not at that moment treating     
               the client
            b. Attorneys
            c. Insurance Companies
            d. Law enforcement agencies – without client consent, a court order or a search warrant is needed
            e. Schools
            f. Immigration and Naturalization Services
            g. Employers
            h. Welfare Agencies
            i. Social Security Administration
            j. Veterans Administration
            k. Internal Revenue Service
            l. Civil Service Department
            m. Courts without a Subpoena Duces Tecum

    *  Authorization is NOT REQUIRED for release of information to:

           a. Another health care facility via telephone (after verification) when the information is needed for DIRECT                         EMERGENCY CARE of the client.
           b. Another physician or health care facility that is at that moment treating the client (after verification, ask that                 they send a valid authorization as soon as possible).
           c. State and local health departments and/or other agencies listed below (inform client in advance, if possible,                  that certain diseases may be reportable):
                   i. Communicable Disease Control
                   ii. Bureau of Maternity and Family Planning Services
                   iii. State Department of Labor
                   iv. Medical Examiner
            d. Many third-party payers have clauses in their contracts that allow for release of information when the                             patient signs the contract. Request a copy of the signed consent from the insurance company before                             releasing information.
           e.  Clients may request in person, via letter or via FAX that copies of immunization records be given or faxed                    to them or another institution. A copy of the signed request or signed “Permission for Release of                                    Information” form will be attached to information transmitted and kept on file by SHC or scanned into the                      EMR for not less than seven years. Refer to HIPAA of 1996.
            f.  Information may be exchanged between the UCA Student Health Clinic, UCA Counseling Center, and                            Disability Support Services without requiring client consent, when those offices are providing services for                    the same client.