Get Authorization To Disclose Protected Health ... - State Of Michigan - Michigan

A HIPAA authorization is consent obtained from an individual that permits a covered entity or business associate to use or disclose that individual's protected health information to someone else for a purpose that would otherwise not be permitted by the HIPAA Privacy Rule.

Under HIPAA, protected health information, or PHI, is individually identifiable health information. Michigan law also protects patients' PHI and includes heightened protections for the disclosure of mental health and substance abuse records.

Protected health information (PHI) is any information in the medical record or designated record set that can be used to identify an individual and that was created, used, or disclosed in the course of providing a health care service such as diagnosis or treatment.

An authorization is a detailed document that gives covered entities permission to use protected health information for specified purposes, which are generally other than treatment, payment, or health care operations, or to disclose protected health information to a third party specified by the individual.

A Privacy Rule Authorization is an individual's signed permission to allow a covered entity to use or disclose the individual's protected health information (PHI) that is described in the Authorization for the purpose(s) and to the recipient(s) stated in the Authorization.

Employee and education records: Any records concerning employee or student health, such as known allergies, blood type, or disabilities, are not considered PHI. Wearable devices: Data collected by wearable devices such as heart rate monitors or smartwatches is not PHI.

Under the HIPAA privacy regulations, patients must be informed about how their PHI will be used and given the opportunity to object to or restrict the use or release of their information. Hospitals may use and disclose PHI without a patient's consent for purposes of treatment, payment and health care operations.