: HOME  |  Privacy Policies  |  Frequently Asked Questions  |  Training

Privacy Forms - HCCs |  Privacy Information - Patients/Pacientes  

   Additional Information  |  Contact Information

YOU ARE HERE : HOME / HIPAA Frequently Asked Questions / PHI FAQ 7
7. May an employee of a Health Care Component (HCC) share PHI with individuals within the HCC or with individuals in another HCC in the University if they request it as part of an audit, quality improvement initiative, or training project?

Yes. Disclosures for treatment, payment, or operations (TPO) purposes are always permissible. The disclosure described above would be considered part of the University's operations, so it is permitted under HIPAA.

See: HIPAA Privacy Policy 22, Treatment Payment and Health Care Operations.
In addition, so long as the disclosure is to an authorized individual for TPO, the disclosure need not be limited to individuals within an HCC, nor is patient Authorization required.

Return to FAQ List
TOP ^  

The University of Oklahoma Health Sciences Center

Office of Compliance
P. O. Box 26901
Oklahoma City, OK 73129
Phone: (405) 271-2511, (866) 836-3150
Fax: (405) 271-1076

Copyright © 2014 The Board of Regents of the University of Oklahoma, All Rights Reserved.
Disclaimer | Copyright