click here to download MS Word format

UNIVERSITY POLICY

I.        PURPOSE

To establish guidelines for assuring that all UMDNJ units that create designated record sets containing Protected Health Information (PHI) have a process to respond to patients requests for amendments of their individual health information.

II.       ACCOUNTABILITY

Under the direction of the President, Senior Vice President for Administration and Finance, Senior Vice President for Academic Affairs, Deans, Vice President for Legal Management, Vice President for Research, Vice President for Finance and Treasurer, Vice President for Human Resources, University Hospital Medical Director, and Presidents/CEOs of the Healthcare Units shall ensure compliance with this policy.

III.     APPLICABILITY

This policy shall apply to health information that is generated during provisions of health care to patients in any of the University’s patient care units, patient care centers or faculty practices as well as Human Subjects research under the auspices of the University or by any of its agents in all UMDNJ Schools, Units, Departments and University owned or operated facilities.

IV.     DEFINITIONS

A.       Protected Health Information (PHI) - For a full explanation of what constitutes protected health information, see University policy, 00-01-15-15:00, Uses and Disclosures of Health Information With and Without an Authorization.

B.       Designated record set - Medical or billing records about individuals maintained by or for a healthcare provider; the enrollment, payment, claims adjudication, and case or medical management record systems maintained by or for a health plan; or records used in whole or in part by or for the provider to make decisions about individuals.

V.      REFERENCES

A.       45 CFR 164.526, Code of Federal Regulations Title 45, Section 164, Part 526, Security and Privacy, Amendment of Protected Health Information.

B.       Uses and Disclosures of Health Information
          With and Without an Authorization                                                                 00-01-15-15:00

The following policies provide additional and related information:

C.       Standards for Privacy of Individually Identifiable Health Information               00-01-15-05:00

D.       Access of Individuals to Health Information                                                   00-01-15-10:00

VI.      POLICY

All UMDNJ units must maintain a process to enable its patients to request an amendment of their individual health information held by the unit.  Such requests must be made in writing and include a reason supporting the amendment.

A.       Requirement:

An individual has the right to request a unit to amend his or her health information.  Units should require individuals to make such requests in writing and to provide a reason to support the amendment.  UMDNJ’s Notice of Privacy Practices informs individuals in advance of such requirements.  An example of a Request For Amendment or Correction of Individual Health Information form can be accessed at the following website:  http://www.umdnj.edu/complweb/policies/hipaapols/RequestforAmendmentForm.pdf.

B.       Responsibilities:

1.       The unit may deny the request if the health information that is the subject of the request meets the following conditions:

a.        It was not created by the unit, unless the originator is no longer available to act on the request.

b.        It is not part of the individual’s designated health record.

c.        It would not be accessible to the individual for the reasons under University policy, 00-01-15-10:00, Access of Individuals to Health Information.

d.        It is accurate and complete.    

2.       The unit must act on the individual’s request for amendment no later than sixty (60) days after receipt of the request for an amendment.  The unit may have a one-time extension of up to thirty (30) days for an amendment request provided the unit gives the individual a written statement of the reason for the delay, and the date by which the amendment will be processed.

3.       If the request is granted, the unit must:

a.        Insert the amendment or provide a link to the amendment at the site of the information that is the subject of the request for amendment.

b.        Inform the individual that the amendment is accepted.

c.        Obtain the individual’s identification of and agreement to have the unit notify the relevant persons with whom the amendment needs to be shared.

d.        Within a reasonable time frame, make reasonable efforts to provide the amendment to persons identified by the individual, and persons, including business associates, that the unit knows have the PHI that is the subject of the amendment and that may have relied on or could foreseeably rely on the information to the detriment of the individual.

4.       If the unit denies the requested amendment, it must provide the individual with a timely, written denial in plain language that contains:

a.        The basis for the denial.

b.        The individual’s right to submit a written statement disagreeing with the denial and how the individual may file such a statement.

c.        A statement that if the individual does not submit a statement of disagreement, the individual may request that the unit provide the individual’s request for amendment and the denial with any future disclosures of PHI.

d.        A description of how the individual may complain to the unit or to the Secretary of the Department of Health and Human Services (DHHS).

e.        The name or title, and telephone number of the designated contact person who handles complaints for the unit.

5.       The unit must permit the individual to submit to the unit a written statement disagreeing with the denial of all or part of a requested amendment and the basis of such disagreement.  The unit may reasonably limit the length of a statement of disagreement.

6.       The unit may prepare a written rebuttal to the individual’s statement of disagreement. Whenever such a rebuttal is prepared, the unit must provide a copy to the individual who submitted the statement of disagreement.

7.       The unit must, as appropriate, identify the record of PHI that is the subject of the disputed amendment and append or otherwise link the individual’s request for an amendment, the unit’s denial of the request, the individual’s statement of disagreement, if any, and the unit’s rebuttal, if any.

8.       If a statement of disagreement has been submitted by the individual, the unit must include the material appended or an accurate summary of such information with any subsequent disclosure of the PHI to which the disagreement relates.

9.       If the individual has not submitted a written statement of disagreement, the unit must include the individual’s request for amendment and its denial, or an accurate summary of such information, with any subsequent disclosure of PHI only if the individual has requested such action.

10.     When a subsequent disclosure is made using a standard transaction that does not permit the additional material to be included, the unit may separately transmit the material required.

11.     A unit that is informed by another unit of an amendment to an individual’s PHI must amend the PHI in written or electronic form.

12.     A unit must document the titles for the persons or offices responsible for receiving and processing requests for amendments.

By Direction of the President:

                                                                               
Vice President for Legal Management

Policy Manual Table of Contents

OPPM Home Page

UMDNJ Home Page