Are University employees required to verify a persons identity prior to releasing protected health information to them?
Yes. Prior to making a disclosure or processing a patient right request, University Personnel must verify the identity of the person requesting the PHI and the authority of any such person to have access to PHI, if the identity of the person is not known to University Personnel. Verification of identity can be accomplished by: (1) presentation of picture I.D. (2) signature comparison or (3) some other appropriate method.