Are covered entities required to provide individuals upon request with an accounting of any protected health information that the entity has disclosed about them to the Mississippi Cancer Registry?
Yes. The Privacy Rule requires covered entities to provide an accounting of disclosures of protected health information. Covered entities must document the date of disclosure, the name of the recipient or reviewer, the description of data released, and the reason for the disclosure. This information must be retained for six years.
Related Questions
- Are covered entities required to provide individuals upon request with an accounting of any protected health information that the entity has disclosed about them to the Mississippi Cancer Registry?
- Can covered entities continue to disclose adverse event reports that contain protected health information to the Department of Health and Human Services (HHS) Office for Human Research Protections?
- May covered entities disclose facially identifiable protected health information, such as name, address, and social security number, for public health purposes?
