Ala. Admin. Code r. 420-2-4-.07

Current through Register Vol. 43, No. 1, October 31, 2024

Section 420-2-4-.07 - Confidentiality

(1) The clinical records of individual patients submitted to the AHSCIR shall be confidential and shall not be public records open to inspection. Only state personnel authorized by the State Health Officer and other individuals authorized by the State Health Officer or designee shall have access to the records. All individuals with access to patient information shall be made aware of the privileged and confidential nature of all information submitted to the AHSCIR.

(2) The information contained in the clinical records of individual patients submitted to the AHSCIR shall be password protected, therefore, only personnel authorized by the OEMS staff to access the system involved in maintaining patient information shall be able to do so.

(3) Clinical information from the AHSCIR may be disclosed in the following circumstances when authorized by the State Health Officer or designee:

(a) Information may be disclosed in response to a subpoena or a valid court order.

(b) Information may be disclosed as provided in the Access to Information for Research Purposes section of these rules.

(c) Information may be released to a participating hospital to confirm a death match if the hospital has an agreement with the Center for Health Statistics to allow release of this information.

(d) Statistical information and data based on client information may be released by the OEMS so long as no information identifying an individual patient or facility is released.

(4) Photocopying or other reproduction of any clinical records or reports in the possession of the OEMS containing identifying information, except as may be required in the conduct of the official business of the OEMS, is prohibited.

(5) Any legible documents such as computer printouts, or photocopies of any documents containing identifying information, shall also be considered confidential material while in active use and shall be destroyed by shredding immediately upon termination of their use by the AHSCIR.

(6) Follow-up information submitted shall be retained indefinitely by the AHSCIR.

(7) Patient-specific data may be exchanged with any other clinical facility for the purpose of obtaining information necessary to complete a case record. This data shall not be further disclosed by that agency or facility.

Ala. Admin. Code r. 420-2-4-.07

Adopted by Alabama Administrative Monthly Volume XXXVII, Issue No. 08, May 31, 2019, eff. 6/30/2019.

Author: Teresa S. Pells, M.P.H., Stephen Wilson, B.S., NRP

Statutory Authority:Code of Ala. 1975, § 22-11C-1, et seq.