Medicare Blog

why is medicare asking me to sign a release for my substance abuse records

by Mr. Colin Keeling Published 2 years ago Updated 1 year ago

Should I sign a medical release?

One form that is usually included in the flood of letters is a medical release. I’ve had a number of people come to me asking whether they should sign it. The short answer is probably not.

What is a release form for medical records?

When you start seeing a new medical provider, the provider will ask you to sign a release form that grants permission for certain staff members to access your record. That access must occur as part of your treatment and is generally very limited.

What does it mean to sign an insurance release?

In the case of an insurance release, it gives your medical providers permission to give your information to an insurance company. Why Does the Insurance Company Want me to Sign the Release? There are two reasons an insurance company might want your medical information.

What if someone uses my Medicare number without my consent?

Identity theft is a serious crime that happens when someone uses your personal information without your consent to commit Medicare fraud or other crimes. Use the following tips to protect yourself from becoming an identity theft victim. Protect your Medicare Number and your Social Security Number. Guard your Medicare card like it’s a credit card.

Which of the following situations may permit disclosure of part 2 information without consent?

Part 2 permits the disclosure of information under certain circumstances without consent during a medical emergency or in other limited situations.

Does Hipaa apply to substance abuse?

42 CFR Part 2 (“Part 2”) is a federal regulation that requires substance abuse disorder treatment providers to observe privacy and confidentiality restrictions with respect to patient records. The HIPAA Privacy Rule also limits use and disclosures of information found in patient records.

What information can be disclosed without specific consent of the patient?

There are a few scenarios where you can disclose PHI without patient consent: coroner's investigations, court litigation, reporting communicable diseases to a public health department, and reporting gunshot and knife wounds.

When Must federal confidentiality requirements be provided to a patient?

Patients must be given a notice of federal confidentiality requirements upon admission to a substance abuse treatment program or soon thereafter.

What is a patient required to do in order for a request to restrict the use or disclosure of their PHI to their health plan to be granted?

A covered entity is required to agree to an individual's request to restrict the disclosure of their PHI to a health plan when both of the following conditions are met: (1) the disclosure is for payment or health care operations and is not otherwise required by law; and (2) the PHI pertains solely to a health care item ...

Which of the following could be a reason why a client is denied access to their health information?

General concerns about psychological or emotional harm are not sufficient to deny an individual access (e.g., concerns that the individual will not be able to understand the information or may be upset by it). In addition, the requested access must be reasonably likely to cause harm or endanger physical life or safety.

What is the one exception where records can be released without patient consent?

You may only disclose confidential information in the public interest without the patient's consent, or if consent has been withheld, where the benefits to an individual or society of disclosing outweigh the public and patient's interest in keeping the information confidential.

Which of the following requires an authorization to release protected health information?

A HIPAA authorization is consent obtained from an individual that permits a covered entity or business associate to use or disclose that individual's protected health information to someone else for a purpose that would otherwise not be permitted by the HIPAA Privacy Rule.

Which situation would require a written authorization from a patient to disclose the PHI?

Authorization. A covered entity must obtain the individual's written authorization for any use or disclosure of protected health information that is not for treatment, payment or health care operations or otherwise permitted or required by the Privacy Rule.

In which cases can a healthcare provider legally share patient information?

Where a patient is not present or is incapacitated, a health care provider may share the patient's information with family, friends, or others involved in the patient's care or payment for care, as long as the health care provider determines, based on professional judgment, that doing so is in the best interests of the ...

What are some examples where PHI can be used and disclosed without a patient's authorization?

Covered entities may disclose protected health information to funeral directors as needed, and to coroners or medical examiners to identify a deceased person, determine the cause of death, and perform other functions authorized by law.

Which of the following was not listed as one of the exceptions in which a release of information is not required to disclose client information?

Terms in this set (6) Which of the following was not listed as one of the exceptions in which a release of information is not required to disclose client information? Individuals who have merely applied to a treatment program yet never attended one are not covered under the standards of 42 CFR Part 2.

Why should medical records be closely monitored?

People can face discrimination, embarrassment, or other repercussions if their information is improperly shared. As such, medical records should be closely monitored and only shared when the patient provides authorization or the circumstances fall under one of the few specific exceptions to patient-approved release.

What happens if a medical practice is improperly storing patient records?

That means if a medical practice is improperly storing patient records, you can take action against that practice if an unauthorized third party gets access to your files.

What happens if you believe your health provider has shared your medical information with a third party?

If you believe that one of your health providers inappropriately shared your medical information with a third party, then you may file a complaint with their employer or with the federal government. The U.S. Department of Health and Human Services (HHS) oversees HIPAA regulations, and the Office for Civil Rights (OCR) handles the violation complaints.

How to request medical information?

If you receive a request to release your medical information to a third-party, you should make sure the form correctly protects your rights before you sign. The form should state: 1 What records you are agreeing to share: The form should list what specific information is accessible, or it should indicate that all the medical information is available, if that’s the case. 2 Whether this will be a one-time or ongoing occurrence: There should be a date when the authorization expires and requires renewal. 3 Who will receive the information: The agreement should include identifying information like the receiver’s name, address, and telephone number. 4 How the medical information will be delivered: In most cases, your medical information should be provided by mail, encrypted email, or hand delivery rather than fax to avoid the information being seen by anyone other than the intended recipient.

How to file a complaint with OCR?

You can file a complaint by mail, email, fax, or through the OCR Complaint Portal. Additionally, your complaint must: State the name of the person, business, or facility that inappropriately shared protected information. State a description of the violation.

How is medical information delivered?

How the medical information will be delivered: In most cases, your medical information should be provided by mail, encrypted email, or hand delivery rather than fax to avoid the information being seen by anyone other than the intended recipient.

What is medical record?

Medical records typically contain highly confidential and sensitive information. Your records include medical tests or exams you had, medications that you’ve taken, medical diagnoses, personally identifying information, and contact information. Understandably, people usually want to keep their medical records private to prevent people ...

Why do insurance companies ask for medical records?

The insurance companies ask for this because they want to find something, anything in your medical history that they can use to deny your claim.

What is a medical release?

A medical release is a document that gives your medical providers permission to disclose your medical information to other people.

What form is usually included in the flood of letters?

One form that is usually included in the flood of letters is a medical release .

Did the Colorado Supreme Court decide Alcon v. Spicer?

No is the short answer. The Colorado Supreme Court decided this in a case called Alcon v. Spicer. In that case, a trial court judge ordered a plaintiff in a personal injury case to release her entire medical history for the past 10 years. The plaintiff objected to this and appealed to the Colorado Supreme Court to protect her privacy. The Supreme Court agreed with the plaintiff and held that she did not have to sign the release. Instead, the court found that the plaintiff only had to allow the defendants access to her medical history that was related to the injuries she was claiming compensation for.

Did the plaintiff have to sign the release?

The Supreme Court agreed with the plaintiff and held that she did not have to sign the release. Instead, the court found that the plaintiff only had to allow the defendants access to her medical history that was related to the injuries she was claiming compensation for. Insurance companies simply disregard this case.

Should you sign a release?

Although you usually shouldn’t sign releases, sometimes it might be OK. One example I can think of is when you have never had any medical treatment except for the treatment related to your injuries. If that’s the case, go ahead and sign it. Second is if you are able to limit the scope of the release to records relevant to the injuries you are claiming compensation for. Third, if your attorney recommends that you do it. Some attorneys would rather just have you sign a release than take the time to redact records and produce a log of all withheld documents. As always, if your attorney is telling you to do something, it is best to follow his or her advice.

Is an insurance company legitimate?

One is legitimate, one is not. First, an insurance company is entitled to information about injuries that you are claiming compensation for. They need information about the amount you were billed for medical care, what care was received, and the dates of that care to make sure it was related to the incident that caused your injuries.

What has not changed under the new Part 2 rule?

What Has Not Changed Under the New Part 2 Rule: The revised rule does not alter the basic framework for confidentiality protection of substance use disorder (SUD) patient records created by federally assisted SUD treatment programs. Part 2 continues to prohibit law enforcement’s use of SUD patient records in criminal prosecutions against patients, absent a court order. Part 2 also continues to restrict the disclosure of SUD treatment records without patient consent, other than as statutorily authorized in the context of a bona fide medical emergency; or for the purpose of scientific research, audit, or program evaluation; or based on an appropriate court order.

What is 42 CFR Part 2?

The 42 CFR Part 2 regulations (Part 2) serve to protect patient records created by federally assisted programs for the treatment of substance use disorders (SUD). Part 2 has been revised to further facilitate better coordination of care in response to the opioid epidemic while maintaining its confidentiality protections ...

What is considered a bona fide medical emergency?

Declared emergencies resulting from natural disasters (e. g., hurricanes) that disrupt treatment facilities and services are considered a “bona fide medical emergency,” for the purpose of disclosing SUD records without patient consent under Part 2.

What is disclosure for payment and health care operations?

Disclosures for the purpose of “payment and health care operations ” are permitted with written consent, in connection with an illustrative list of 18 activities that constitute payment and health care operations now specified under the regulatory provision.

When an SUD patient sends an incidental message to the personal device of an employee of a Part 2 program?

When an SUD patient sends an incidental message to the personal device of an employee of a Part 2 program, the employee will be able to fulfill the Part 2 requirement for “sanitizing” the device by deleting that message.

What is the purpose of the SAMHSA?

SAMHSA's mission is to reduce the impact of substance abuse and mental illness on America's communities.

Can a SUD patient disclose Part 2 records?

An SUD patient may consent to disclosure of the patient’s Part 2 treatment records to an entity ( e.g., the Social Security Administration ), without naming a specific person as the recipient for the disclosure.

What is a disability authorization?

The Authorization allows the disability insurer to request virtually any information not otherwise barred by law–not just medical records. Again, the company includes a blanket category for any information the person or entity knows about you. The information can include: Medical information. Medical consultations.

How to make sure your disability authorization isn't used to unfairly deny or terminate a legitimate claim for?

What can you do to make sure your Authorization isn’t used to unfairly deny or terminate a legitimate claim for disability insurance benefits ? First and foremost, make sure you know what information about you exists, and do what you can to ensure it is fair and accurate. For example, look at your medical records to make sure your condition is correctly documented, check your credit history for mistakes, and try not to burn bridges with any personal or business associates. When you are asked to sign an Authorization, take the time to review the language so that you know exactly what you’re authorizing. These steps can help avoid unpleasant surprises when the company asks for information you thought was private. If you have a disability insurance attorney involved, he or she can help manage any requests for information, and may be able to limit the scope of the Authorization in some instances.

What is prescription history?

Prescription history (including what you were prescribed, who prescribed it, when you filled the prescription, and whether/when you obtained refills from the pharmacy) Mental health records, including psychiatric treatment notes. HIV/AIDS treatment information.

Can disability insurance obtain information?

It can be unsettling to think about how much information a disability insurer can obtain about you using one piece of paper. While insurance companies have the right to gather information that is truly relevant to your claim, oftentimes the Authorization is used for improper purposes, such as attempting to improperly influence doctors ...

What is HIPAA for mental health?

HIPAA recognizes that some patients (including those with a mental illness or substance use disorder) may be unable to make their own health care decisions, including decisions related to health information privacy. HIPAA provides personal representatives of a patient with the same rights to request and obtain health information as the individual, ...

What is HIPAA law?

The HIPAA Rules are designed to protect the privacy of all of an individuals’ identifiable health information and to ensure that health information is available when needed for treatment and other appropriate purposes. Given the sensitive nature of mental health and substance use disorder treatment information, ...

Why do we need to share information about mental health?

At times, health care providers need to share mental and behavioral health information to enhance patient treatment and to ensure the health and safety of the patient or others.

How is information related to mental health treated under HIPAA?

How information related to mental health is treated under HIPAA; When information related to mental health may be shared with family and friends of an individual with mental illness, including parents of minors; and. The circumstances in which information related to mental health may be disclosed for health and safety purposes.

What is the role of parents in mental health?

Parents, friends, and other caregivers of individuals with a mental health condition or substance use disorder play an important role in supporting the patient’s treatment, care coordination, and recovery.

What age can a minor be a representative?

Parents of minor children (typically under age 18) are generally the personal representatives of their children. State law addresses the age at which a minor child may consent to certain types of health care and may contain additional requirements related to disclosing a minor’s health information to parents (or withholding it).

Does OCR have a FAQ?

OCR has organized certain FAQ's related to handling mental health information under HIPAA in two easy-to-access PDFs.

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 1 2 3 4 5 6 7 8 9