HIPAA Core Policy: Use & Disclosure of Health Information for Marketing

HIPAA Core Policy: Use & Disclosure of Health Information for Marketing

Abstract:
This policy establishes guidelines for the use and disclosure of health information for purposes of marketing by UAB/UABHS Covered Entities in compliance with the Health Insurance Portability and Accountability Act and Alabama state law.
Effective Date:
9/23/2013
Responsible Party:
Contacts:
None Assigned
Administrative Category:
Applies To:
Faculty, Staff, Students
Material Original Source:

 
 

1. PURPOSE: To establish guidelines for the use and disclosure of health information for purposes of marketing by UAB/UABHS (“UAB”) Covered Entities in compliance with the Health Insurance Portability and Accountability Act (“HIPAA”) and Alabama state law. 

2. PHILOSOPHY: UAB values and promotes business practices respecting the confidentiality of health information.


3. APPLICABILITY: This standard applies to all UAB Covered Entities (School of Dentistry, School
of Health Professions, School of Medicine, School of Nursing, School of Optometry, Joint Health Sciences Departments, School of Education Community Clinic, and other UAB entities that may be added from time-to-time) and to the following UABHS Covered Entities: University Hospital, The Kirklin Clinic, The Kirklin Clinic at Acton Road, Callahan Eye Hospital, UAB Health Centers,Medical West Hospital, VIVA Health, Inc., University of Alabama Health Services Foundation, Ophthalmology Services Foundation, Valley Foundation, and other UABHS anaged entities that may be added from time-to-time). For purposes of this standard, UAB and UABHS Covered Entities shall be collectively referred to as "UAB."  

4. DEFINITIONS: UAB adopts the definitions set forth in the HIPAA regulations at 45 CFR Parts 160, 162, and 164.  

4.1. Authorization: A document that is required to be signed by the patient to use and disclose specified protected health information for specified purposes. It may be required in some circumstances in order to conduct marketing.

4.2. Disclosure: The release, transfer, provision of access to, or divulging in any other manner of information outside the UAB covered entity holding the information.

4.3. Marketing: Except as provided in Section 5.3.1, a communication about a product or service to encourage recipients of the communication to purchase or use the product or service.

4.3.1. Marketing does NOT include the following communications made by UAB if UAB is not paid for these communications: 

4.3.1.1. To provide refill reminders or otherwise communicate about drugs being prescribed for the patient (UAB may be reimbursed for the costs of the communication). 

4.3.1.2. To describe products or services available from UAB’s participation in a health care provider network or health plan network, or for the purpose of describing if and the extent to which a product or service (or payment for UAB such product or service) is provided by a covered entity or included in a plan of benefits

4.3.1.3. As part of the treatment of the individual and for the purpose of furthering the treatment of that individual

4.3.1.4. For case management or care coordination for that individual or information to direct or recommend alternative treatment, therapy, health care provider, or setting of care 

4.3.1.5. For face-to-face communications and promotional gifts of nominal value.

4.4. Protected Health Information (PHI): Health information, including demographic information collected from an individual and created or received by a health provider, health plan, employer or health care clearinghouse that relates to the past, present, or future physical or mental health or condition of any individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual, and that identifies an individual or there is a reasonable basis to believe the information can be used to identify the individual and that is transmitted or maintained by electronic media or any other form or medium. PHI does not include individually identifiable health information in education records covered and excepted by the Family Educational Right and Privacy Act and employment records held by a covered entity in its role as an employer.
 
4.5. Remuneration: Direct or indirect payment from or on behalf of a third party whose product or service is being described; does not include non-financial (in-kind) benefits.

5.
POLICY STATEMENTS:

 

5.1. Use and Disclosure of PHI for Marketing
5.1.1. UAB will only use or disclose PHI for Marketing in accordance with the requirements set forth in this standard. 
5.1.2. UAB will not accept any remuneration from third parties in return for disclosing PHI to them for purposes of Marketing
 
5.1.3. Use or Disclosure of PHI for Activities Excluded from Marketing. UAB may use or disclose PHI for the activities described in Section 5.3.1 without obtaining patient authorization.
 
5.1.4. Use or Disclosure of PHI for Marketing
 
5.1.4.1. UAB Covered Entities may not use or disclose PHI for Marketing, unless the UAB Covered Entity obtains a patient’s signature on the appropriate HIPAA-compliant Authorization.
 
5.1.4.1.1. The Authorization must specifically describe, among other things, the purpose of the disclosure, the information to be disclosed, and the third party recipients.
 
5.1.4.1.2. UAB Covered Entities cannot condition the availability of treatment on requiring an Authorization for third-party marketing.
 
5.1.4.1.3. If the marketing is expected to result in direct or indirect remuneration to UAB from a third-party, the Authorization must state that remuneration is expected.

5.2. Each UAB Covered Entity shall develop processes and policies to implement the requirements of this standard.


6. REFERENCES: None

7. SCOPE: This policy applies to all UAB Covered Entities and to UABHS Covered Entities identified in Section 3.

8. ATTACHMENTS: Note: All HIPAA forms may be found on the UAB/UABHS HIPAA website at www.HIPAA.uab.edu.

To view other HIPAA Core Policies and for more information, please visit http://www.hipaa.uab.edu/standards.htm.