Accounting of Disclosures of Protected Health Information, v1.0

Specifies that a covered entity must have policies and procedures to permit an individual to receive an accounting of disclosures of protected health information made by a covered entity in the six years prior to the date on which the accounting is requested, except for certain disclosures.
An indivdual's rights to receive an accounting of disclosures of his/her PHI must be permited by an organization's policies and procedures, subject to certain conditions and restrictions, as described in the referenced citati
Due to the complexity of the rule as originally written, the assessor must use the full text of the citation section to perform this assessment.

Assessment Step

1
Individual Account for PHI Disclosures (IndividualAccountforPHIDisclosures)
Does covered entity have policies and procedures to permit an individual to receive an accounting of disclosures of protected health information made by a covered entity in the six years prior to the date on which the accounting is requested, except for disclosures as provided by the referenced citation?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) that support the assessor's response to this assessment step.

Conformance Criteria (1)

Account for PHI Disclosures
The covered entity must have policies and procedures to permit an individual to receive an accounting of disclosures of protected health information made by a covered entity in the six years prior to the date on which the accounting is requested, except for disclosures as provided by the referenced citation.
Citation
HIPAA-Privacy-Rule
45 CFR Section 164.528