A system that is the authoritative data source for a given data element or piece of information used for patient care or billing.

A documented assessment of the potential risks and vulnerabilities to the confidentiality, integrity and availability of ePHI, and an estimation of the security measures sufficient to reduce the risks and vulnerabilities to a reasonable and appropriate level. Risk analysis involves determining what requires protection, what it should be protected from, and how to protect it.

Research is any systematic investigation (including research development, testing, and evaluation) that is designed to contribute to generalizable knowledge.

Any access to a device on the organizations network through a non–organization controlled network, device, or medium, for example by DSL, cable modem or dial–up connection.

FAQs Archive

Q: How can I help make sure my health care providers share my health information with my family, friends, or others involved in my care or payment for my care when I want them to?

Print a copy of A Patient's Guide: When Health Care Providers May Communicate About You with Your Family, Friends, or Others Involved In Your Care - PDF and discuss it with your health care provider at your next appointment. You may also want to share this information with your family members, friends, or others involved in your care or payment for your care.

Q: Can my health care provider discuss my health information with an interpreter?

Yes. HIPAA allows your health care provider to share your health information with an interpreter who works for the provider to help communicate with you or your family, friends, or others involved in your care. If the interpreter is someone who does not work for your health care provider, HIPAA also allows your provider to discuss your health information with the interpreter so long as you do not object.

Q: If my family or friends call my health care provider to ask about my condition, will they have to give my provider proof of who they are?

HIPAA does not require proof of identity in these cases. However, your health care provider may have his or her own rules for verifying who is on the phone. You may want to ask your provider about her or his rules.

Q: Do I have to give my health care provider written permission to share or discuss my health information with my family members, friends, or others involved in my care or payment for my care?

HIPAA does not require that you give your health care provider written permission. However, your provider may prefer or require that you give written permission. You may want to ask about your provider’s requirements.