(A) The medicaid director of job and family services, in consultation with the office of health transformation, shall adopt rules in accordance with Chapter 119. of the Revised Code for the purpose of specifying the content of agreements governing covered entities' participation in approved health information exchanges. At a minimum, the rules shall require the content of such participation agreements to include all of the following:
(1) Procedures for a covered entity to disclose an individual's protected health information to an approved health information exchange;
(2) Procedures for a covered entity to access an individual's protected health information from an approved health information exchange;
(3) Subject to division (B) of this section, a written notice to be provided by a covered entity to an individual or the individual's personal representative prior to the covered entity's disclosure of the individual's protected health information to an approved health information exchange;
(4) Documentation the covered entity must use to verify that a notice described in division (A)(3) of this section has been provided by the covered entity to an individual or the individual's personal representative prior to the disclosure of the individual's protected health information to an approved health information exchange;
(5) Procedures for an individual or the individual's personal representative to submit to the covered entity a written request to place restrictions on the covered entity's disclosure of protected health information to the approved health information exchange;
(6) The standards a covered entity must use to determine whether, and to what extent, to comply with a written request described in division (A)(5) of this section;
(7) The purposes for which a covered entity may access and use protected health information from the approved health information exchange.
(B) With respect to the written notice described in division (A)(3) of this section, the rules may specify that the notice can be incorporated into the covered entity's notice of privacy practices required by 45 C.F.R. 164.520 and shall specify that the notice include the following statements:
(1) The individual's protected health information will be disclosed to the approved health information exchange to facilitate the provision of health care to the individual.
(2) The approved health information exchange maintains appropriate administrative, physical, and technical safeguards to protect the privacy and security of protected health information.
(3) Only authorized individuals may access and use protected health information from the approved health information exchange.
(4) The individual or the individual's personal representative has the right to request in writing that the covered entity do either or both of the following:
(a) Not disclose any of the individual's protected health information to the approved health information exchange;
(b) Not disclose specific categories of the individual's protected health information to the approved health information exchange.
(5) Any restrictions on the disclosure of protected health information an individual requests as described in either division (B)(4)(a) or (b) of this section may result in a health care provider not having access to information that is necessary for the provider to render appropriate care to the individual.
(6) Any restrictions on the disclosure of protected health information an individual requests as described in division (B)(4)(a) of this section must be honored by the covered entity.
(7) Any restrictions on the disclosure of protected health information an individual requests as described in division (B)(4)(b) of this section must be honored if the restriction is consistent with rules adopted under this chapter.
(C) In adopting standards under division (A)(6) of this section, the medicaid director shall take into consideration the technical capabilities of software available to health information exchanges."
Amended by 130th General Assembly File No. 25, HB 59, §101.01, eff. 9/29/2013.
Added by 129th General AssemblyFile No.127, HB 487, §101.01, eff. 9/10/2012.
Section: Previous 3798.01 3798.02 3798.03 3798.04 3798.06 3798.07 3798.08 3798.10 3798.12 3798.13 3798.14 3798.15 3798.16Last modified: October 10, 2016