Get Protected Health Information Form

A HIPAA consent form is a legal document that authorizes covered entities to disclose protected health information that is not permitted by the HIPAA Privacy Rule. The form must be retained as proof that the authorization was obtained in writing to waive certain Privacy Rule restrictions.

PHI is anything that can be used to identify an individual such as private information, facial images, fingerprints, and voiceprints. These can be associated with medical records, biological specimens, biometrics, data sets, as well as direct identifiers of the research subjects in clinical trials.

All formats of PHI records are covered by HIPAA. These include (but are not limited to) spoken PHI, PHI written on paper, electronic PHI, and physical or digital images that could identify the subject of health information.

Medical Records and PHI should be stored out of sight of unauthorized individuals, and should be locked in a cabinet, room or building when not supervised or in use. Provide physical access control for offices/labs/classrooms through the following: Locked file cabinets, desks, closets or offices. Mechanical Keys.

Control and secure keys to locked files and areas. Do not leave keys in locks or in areas accessible to persons who do not have need for the stored PHI. Do not place documents containing PHI in trash bins. Promptly shred documents containing PHI when no longer needed, in ance with College procedures.

ing to the HIPAA Journal, “PHI is any health information that can be tied to an individual.” This includes information used during the provision of healthcare, payment for healthcare, or for healthcare operations. ePHI is simply PHI stored electronically on a hard drive, server, thumb drive, or other devices.

In addition, organizations must provide a patient's protected health information to them if requested, preferably in an electronic PHI (ePHI) format.

Generally, PHI can be found in a wide variety of documents, forms, and communications such as prescriptions, doctor or clinic appointments, MRI or X-Ray results, blood tests, billing information, or records of communication with your doctors or healthcare treatment personnel.