Can patient records be reviewed by health officials or their agents for the purpose of conducting VFC provider site visits?
Yes. As explained in the answer to question 1 above, under 45 CFR ยง 164.512(b) of the HIPAA Privacy Rule, covered entities may disclose protected health information without authorization to public health authorities that are authorized by law to collect such information for public health purposes. VFC is a public health program that provides vaccines for children in certain eligibility groups. The VFC program was authorized under Section 1928 of the Social Security Act and has been delegated to CDC to administer. VFC providers, as covered entities, may share patient records with health officials or their agents because a health department is a public health authority authorized by law to review patient records for VFC purposes, or because contractors are acting under a grant of authority from a public health authority.
Related Questions
- Are VFC providers required to allow health officials access to the immunization records of children in their practice to determine compliance with VFC requirements?
- How can I obtain medical records for my patient from their domestic health screening exam?
- Are patient records maintained by FHP or the Healthcare provider?
