Confidentiality

Confidential Information and Legal RequirementsDissemination

POLICY:

It is the policy of Sunshine Farm to ensure that all verbal and written information of the person served is released in a manner that protects the individual’s right to confidentiality. Information may not be released without the individual’s written permission, except as the law permits or requires. Sunshine Farm will make reasonable efforts to limit use, disclosure of, and requests for private health information to the minimum necessary to accomplish the intended purpose.

PROCEDURES:

A. Authorized information may be released in written and/or verbal form. The release of information will occur upon receipt of an authorization determined as valid. Validity is determined by the presence of each of the following items:

1) The name of the person about whom information is to be released, including social security number.

2) The specific content of the information that is to be released.

3) The person to whom the information is to be released.

4) The signature of the person who is legally authorized to sign the release and the date on which the release is signed.

5) The expiration date of the authorization not to exceed one year.

6) Information that defines how and when the authorization can be revoked.

B. Requests for Information:

1) All requests for information will be in writing.

2) Requests for information from an individual’s record will be answered within 5 days from the date of receipt. If the information cannot be provided within this period, the requester will be informed in writing of the reasons for the delay and the anticipated date the information will be available.

3) Requests for records that have been incorporated into Sunshine Farm’s records from outside sources will not be released and the requester will be encouraged to seek those records from their original source.

C. Release of Sensitive Information:
1) Information contained within the individual records may have a serious adverse effect on an individual’s mental or physical health if disclosed to the individual. Such information may contain materials requiring an explanation or interpretation to assist in its acceptance and/or assimilation to avoid an adverse impact on the individual’s health. To minimize the risk of the release of information adversely impacting a person served, the following guidelines will apply:

a. The Mona Johannson will review all requests of individuals seeking direct access to their records. Information identified as potentially sensitive will be reviewed by administration. This review will occur within one working day of the referral.

b. If after reviewing the record, it is believed that disclosure of the information directly to the individual could have an adverse effect on that individual, arrangements will be made to disclose the information to a staff member selected by the individual. The staff member will discuss the information with the individual prior to the release.

c. Should it be determined by the staff member that after a careful and conscientious explanation of the information to the individual has been made, and it is the opinion that access to the information could be harmful, physical access will be denied. The justification for making the denial will be fully documented by the staff member and final concurrence will be made by Mona Johannson. The individual will be advised of the denial, the reasons for the denial of the request, and advised of the right to file a grievance, should the individual disagree with the decision.

D. Legal counsel will be consulted when the release of information involves the following circumstances:

1) Any request for records that are to be used in a suit against the organization or in a prosecution against a person served.

2) All subpoenas for records that were not accompanied by a written consent signed by the person served.

3) All requests for information which indicates a possible liability for the cost of care and services.

E. Information may be released without the consent of persons served under the following conditions:

1) For use by any Sunshine Farm employee who has a need for information in the performance of their duties to ensure continuity of care.

2) To medical personnel who have a need for the information for the purpose of treating a condition which poses an immediate threat to the health of a person served.

3) To public health authorities related to infection with HIV when there is a written request that the information and there is a fine or penalty for failure to comply.

4) To a spouse or sexual partner of an individual when it is reasonably believed that the individual will not provide disclosure of information related to infection with HIV when that information is necessary to protect the health of the spouse or sexual partner.

5) To government agencies or entities charged under applicable laws with the protection of public health and safety. In such cases, the information may be releasde with the consent of the individual whose records are being requested, or upon receipt of a written request from the head of the government entity. A request for release under these circumstances may be either a standing written request based on reporting requirements, or a specific written request from the head of a law enforcement agency for a special law enforcement purpose.

6) Disclosure as a result of a court order from a court of competent jurisdiction.

7) To the Department of Children and Family Services for the purpose of investigating abuse, neglect or exploitation.

8) To the Medical Examiner, in conjunction with an investigation of a suspicious death.

9) To professional review organizations, in accordance with government contracts (Medicare/Medicaid).

10) Disclosure of information to a third-party payer in a care cost recovery action will be limited to date of birth; social security number; payment history; and account number, unless the individual provides a written consent designating further information to be released.

F. An accounting record will be maintained on all records released by Sunshine Farm. It will include the date, nature and purpose of each disclosure, the name of the party to whom the disclosure is made. This accounting record will be maintained in the record from which the disclosure was made. In addition, a logbook will be maintained for all release of information for data reporting purposes.

G. Special consent is required to release records that contain information related to drug and alcohol addiction and abuse, and tests for, or infection with human immune virus. Any authorized disclosure from records containing information of this type will be limited to that information which is necessary for the purpose of the disclosure. Because of the special nature of this information, the release must be processed by Mona Johannson to assure compliance with the special regulatory requirements.

H. The following type of communications do not constitute disclosure of information/records:

1) Communication of information between any Sunshine Farm employees who have a need for the information in connection with their official duties.

2) Communications with law enforcement offices which are directly related to the person served committing or threatening to commit a crime on the organization’s property or against an employee of the organization.

3) Communication of information which does not provide an individual’s identifying information.

I. Sunshine Farm will protect the confidentiality of private health care information when transferring data electronically by adherence to the following guidelines:

1) All data sets containing individual names transferred on a diskette, e-mail or any other electronic medium, will be password encrypted.

2) The sending and receiving parties prior to transfer of the electronic data will negotiate passwords.

3) Passwords will be at lease eight characters in length, contain both letters and numbers, and must not be commonly used words.

4) Passwords for encrypted files may not be mailed in the same shipping package as the encrypted file.

J. Sunshine Farm will adhere to the following guidelines when mailing confidential private health information:

1) Stamp all envelopes containing records as confidential.

2) Clearly indicate a particular office to the address where the envelope is to be delivered.

3) Whenever possible, include in the address the name of the staff member authorized to open the envelope.

4) All envelopes individually addressed will contain the following statement in the outside of the envelope: “TO BE OPENED BY ADDRESSEE ONLY”.

K. Telephone Calls.
All telephone calls from outside the organization that request confirmation of an individual being served by Sunshine Farm will be handled by repeating the following statement: “I can neither confirm or deny that the individual in question is receiving services or has ever received services without a written authorization from that individual.”

L. Violations by staff.
Sunshine Farm employee who knowingly and/or willfully violates provisions of this policy and procedures will face administrative disciplinary action that may result in termination of employment.

M. Reporting.
Serious breaches of confidentiality will result in a critical incident report being created by the administrator within 4 business days, and if deemed appropriate it will be shared with Community Living B. C.. This will be filed and included in the annual review of incident reports to look for ways to improve.

Written by Sharon Alcock

Reviewed on December 3, 2024 by
Sharon Alcock
Mona Johannson
Included in Staff Manuals and Welcome booklet for individuals.