11.07.2015 Views

Billing Manual for Community Care Network Providers

Billing Manual for Community Care Network Providers

Billing Manual for Community Care Network Providers

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

HIPAA regulations.See the policy on Transition of Prior Consents and Authorizations <strong>for</strong> the completeprocedure.<strong>Community</strong> <strong>Care</strong> may use and disclose protected health in<strong>for</strong>mation in order to improvebusiness operations and services to members. Protected health in<strong>for</strong>mation that hadbeen de-identified and restricted may be released to business associates <strong>for</strong> activitiessuch as, but not limited to: oversight, auditing, or improving <strong>Community</strong> <strong>Care</strong>’s dailyoperations (HIPAA 164.504(f)(2)). Prior to releasing such in<strong>for</strong>mation, businessassociates must sign a Business Associate Agreement. This agreement holds thebusiness associate accountable <strong>for</strong> the protected health in<strong>for</strong>mation that they willreceive. Included in the agreement is (HIPAA Section 164.512(i)):A description of the permitted uses and disclosures of the limited protected healthin<strong>for</strong>mation by the recipient, consistent with the purposes outlined in his/her proposalor contract.The requirement to limit access to who may receive the data.The requirement that the business associate will not use or disclose this in<strong>for</strong>mationother than as permitted by the agreement or otherwise required by law.The requirement that the business associate will take appropriate safeguards toprevent the use or disclosure of the in<strong>for</strong>mation. If the business associate becomesaware that the in<strong>for</strong>mation was tampered with or released mistakenly they mustnotify <strong>Community</strong> <strong>Care</strong>. <strong>Community</strong> <strong>Care</strong> will give the business associate anopportunity to investigate and rectify the situation.The requirement that the business associate will ensure that any agents, including asubcontractor, to whom the business associate provides the limited in<strong>for</strong>mation,agrees to the same restrictions and conditions that apply to the business associate.The expectation that the business associate will not try to re-identify the in<strong>for</strong>mationor contact members.An explanation that if the Secretary of Health and Human Services requests thisin<strong>for</strong>mation in order to oversee if <strong>Community</strong> <strong>Care</strong> is compliant with HIPAAregulations, the business associate will release the in<strong>for</strong>mation to the Secretary.The requirement that, once the in<strong>for</strong>mation is no longer needed the businessassociate will destroy it or return it to <strong>Community</strong> <strong>Care</strong> in order <strong>for</strong> it to be destroyed.A clause allowing the business associate contract to be terminated at any time if<strong>Community</strong> <strong>Care</strong> has reason to believe that the business associate has violated anyof the above.<strong>Community</strong> <strong>Care</strong> may disclose protected health in<strong>for</strong>mation that has been de-identifiedto Business associates <strong>for</strong> business functions that have been contracted. <strong>Community</strong><strong>Care</strong> requires the following of the Business associate contract (HIPAA Section164.504(e)(ii)):The in<strong>for</strong>mation given to them will not be used or further disclosed unless it isrequired or permitted by the contract or as required by the law (HIPAA Section<strong>Community</strong> <strong>Care</strong> Provider <strong>Manual</strong> | 1-888-251-CCBH | © 2012 All Rights Reserved | Page 147

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!