What other HIPAA or Minnesota requirements might affect the workers compensation system?
Verification of identity: A covered entity must verify the identity and authority of a person requesting protected health information if the identity or authority is not known to the covered entity. A covered entity may rely on a written request on appropriate government letterhead and a written statement (or oral statement if a written one is impracticable) of the public official’s legal authority under which the information is requested. [45 CFR 164.514 (h)] Minimum necessary disclosure: Unless a disclosure is required by law or authorized by the individual, a health care provider or other covered entity is required to make reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose of the use, disclosure or request. A health care provider is permitted under HIPAA to reasonably rely on a public official’s representations that the information requested is the minimum necessary for the intended purpose. [45 CFR 164.502 (b) and 16
