c. Comm Policy 39.00/HIPAA - Laserfiche WebLink

CASS COUNTY COMMISSION POLICY MANUAL 39.00 SUBJECT: HEALTH INSURANCE PORTABILITY & ACCESSIBILITY ACT (HIPAA) PAGE 2 OF 10 For the appropriate uses, Cass County will provide access to IIHI only to those employees on a "need to know" basis. Employees will only be given information that the employee needs to have in order to accomplish a given function and only for proper administration of HIPAA. Cass County will limit the amount of IIHI disclosed to the amount reasonably necessary to achieve the purpose of the disclosure on a case-by-case basis. For appropriate uses, Cass County will release non-routine IIHI when it is determined that the request constitutes a valid request and IIHI to be disclosed will be limited to the amount reasonably necessary to accomplish the purpose of the disclosure. Cass County may rely on a reasonable request as the minimum necessary for the stated purpose(s) when: *The disclosure is to a public official as allowed in the social responsibility reporting found in § 45 CFR 164.512; *The information is requested by another covered entity;*The information is requested by an employee or business associate of Cass County; *The disclosure is for research purposes and the County has documented a waiver approval as required by 45 CFR 164.512(1). Access to Designated Record Set: Individuals have a right to access any protected health information that is used to make decisions about the individual subject of the data, including information used to make health-care decisions or information used to determine whether a claim will be paid. The individual has a right to access their "designated record set." The right of access also applies to health-care clearinghouses, health-care providers that create or receive protected IIHI other than as a business associate of Cass County.