Ala. Admin. Code r. 420-7-4-.07

Current through Register Vol. 42, No. 12, September 30, 2024

Section 420-7-4-.07 - Confidentiality

(1) The clinical records of individual patients submitted to the AHSCIR shall be confidential and shall not be public records open to inspection. Only state personnel authorized by the State Health Officer and other individuals authorized by the State Health Officer or designee shall have access to the records.

(2) The information contained in the clinical records of individual patients submitted to the AHSCIR shall be transferred to computer-compatible means of data entry. All patient information will be password protected thus only personnel authorized by the AHSCIR staff to access the system involved in maintaining patient information be able to do so.

(3) Clinical information in possession of the AHSCIR may be disclosed in the following circumstances when authorized by the State Health Officer or designee:

(a) Information may be disclosed in response to a subpoena or a valid court order;

(b) Information may be disclosed as provided in the Access to Information for Research Purposes of these Rules;

(c) Information from death certificates may be released to a participating hospital when the hospital requests a death match for confirmation of the reported or suspected deaths of head and/or spinal cord injury deaths treated at that hospital. Death match information provided to hospitals shall not be further released by that facility.

(d) Statistical information and data based on client information may be released by the AHSCIR so long as no information identifying an individual patient or facility is released.

(4) Photocopying or other reproduction of any clinical records or reports in the possession of the AHSCIR containing identifying information, except as may be required in the conduct of the official business of the AHSCIR, is prohibited.

(5) Any legible documents other than the original incidence reports and abstracts, such as computer printouts or photocopies of any documents containing identifying information, shall also be considered confidential material while in active use, and shall be destroyed by incineration or shredding immediately upon termination of their use by the AHSCIR.

(6) Original incidence reports, abstracts, and follow-up information submitted shall be retained indefinitely by the AHSCIR. All individuals with access to patient information shall be made aware of the privileged and confidential nature of all information submitted to the AHSCIR.

(7) Patient-specific data may be exchanged with any other clinical facility for the purpose of obtaining information necessary to complete a case record. This data shall not be further disclosed by that agency or facility.

Author: Teresa S. Pells, M.P.H.

Ala. Admin. Code r. 420-7-4-.07

New Rule: Filed November 18, 1998; effective December 23, 1998.

Statutory Authority:Code of Ala. 1975, § 22-11C-1, etseq.