{"id":486,"date":"2025-02-25T16:40:06","date_gmt":"2025-02-25T16:40:06","guid":{"rendered":"https:\/\/dhss.delaware.gov\/otsa\/hipaaguidelines\/"},"modified":"2025-02-25T16:45:41","modified_gmt":"2025-02-25T16:45:41","slug":"hipaaguidelines","status":"publish","type":"page","link":"https:\/\/dhss.delaware.gov\/otsa\/epqc\/hipaaguidelines\/","title":{"rendered":"epqc\/hipaaguidelines ~  Human Subjects Review Board: HIPAA Guidelines for Authorization  &#8211; Delaware Health and Social Services &#8211; State of Delaware"},"content":{"rendered":"<div data-swiftype-index=\"true\">\n\n\n\n  <br>\n\n  \n\n  <div class=\"container\" id=\"main_header\"> \n\n    <!-- BEGIN readspeaker div -->\n\n    <div class=\"rs_skip rsbtn rs_preserve\" id=\"readspeaker_button1\">\n\n      <a accesskey=\"L\" class=\"rsbtn_play\" href=\"https:\/\/app-na.readspeaker.com\/cgi-bin\/rsent?customerid=7262&#038;lang=en_us&#038;readid=main_content&#038;url=https:\/\/dhss.delaware.gov\/epqc\/hipaaguidelines.html\" title=\"Listen to this page using ReadSpeaker\">\n\n        <span class=\"rsbtn_left rsimg rspart\"><span class=\"rsbtn_text\"><span>Listen<\/span><\/span><\/span>\n\n        <span class=\"rsbtn_right rsimg rsplay rspart\"><\/span>\n\n      <\/a>\n\n    <\/div>\n\n    <!-- END readspeaker div -->\n\n\n\n    <header class=\"pull-left\">\n\n      <h1><!--[type=EDIT name=\"Page Title\"]-->Human Subjects Review Board HIPAA Guidelines for Authorization<!--[END]--><\/h1>\n\n    <\/header>\n\n  <\/div><br>\n\n \n\n  <div class=\"container\">\n\n    <div class=\"row\">\n\n      <div class=\"col-md-3\" id=\"leftCol\">\n\n        <div class=\"panel-group\" id=\"accordion\">\n\n          <div class=\"panel sectionmenu_panel\">\n\n            <div class=\"panel-heading\">\n\n              <p class=\"panel-title\"><a class=\"agency_nav\" data-parent=\"#accordion\" data-toggle=\"collapse\" href=\"#collapseOne\"><strong><i class=\"fa fa-align-justify fa-fw\"><\/i> Office of the Secretary &#8211; Administration Menu<\/strong><\/a><\/p>\n\n            <\/div>\n\n\n\n            <div class=\"panel-collapse collapse in\" id=\"collapseOne\">\n\n              <div class=\"panel-body\" id=\"clf_nav\">\n\n                  <ul class=\"nav nav-stacked nav-pills-clf\" id=\"agency_sidebar\">\n    <li><a href=\"\/otsa\/\"><h2>Home <i class=\"fa fa-home fa-fw\"><\/i><\/h2><\/a><\/li>\n    <li class=\"toplevel\"><a data-parent=\"#agency_sidebar\" data-toggle=\"collapse\" href=\"#HomeMenu\"><h2>About <i class=\"fa fa-caret-right fa-fw\"><\/i><\/h2><\/a>\n    <ul class=\"panel-collapse collapse\" id=\"HomeMenu\">\n    <li>\n      <a href=\"\/otsa\/about.html\">About Office of the Secretary &#8211; Administration<\/a>\n    <\/li>\n    <li>\n      <a href=\"\/otsa\/sections.html\">Sections &#038; Programs<\/a>\n    <\/li>\n    <li>\n      <a href=\"\/otsa\/faq.html\">FAQs<\/a>\n    <\/li>\n   \n    <li>\n      <a href=\"\/otsa\/contact.html\">Contact Information<\/a>\n    <\/li>\n    <li>\n      <a href=\"\/otsa\/ofclocations.html\">Office Locations<\/a>\n    <\/li>\n  <\/ul><\/li>\n    <li class=\"toplevel\"><a data-parent=\"#sidebar\" data-toggle=\"collapse\" href=\"#ServicesMenu\"><h2>Services <i class=\"fa fa-caret-right fa-fw\"><\/i><\/h2><\/a>\n    <ul class=\"panel-collapse collapse\" id=\"ServicesMenu\">  \n\n   <!-- <li>\n      <a href=\"\/rfp\/dhssrfp.htm\">Funding Opportunities<\/a>\n    <\/li>\n    <li>\n      <a href=\"\/rfp\/dhssrfp.htm\">Requests for Proposals<\/a>\n    <\/li>-->\n    <li>\n      <a href=\"\/otsa\/arms\/reportfraud.html\">Reporting Fraud<\/a>\n    <\/li>\n  <\/ul><\/li>\n    <li class=\"toplevel\"><a data-parent=\"#sidebar\" data-toggle=\"collapse\" href=\"#InformationMenu\"><h2>Information <i class=\"fa fa-caret-right fa-fw\"><\/i><\/h2><\/a>\n    <ul class=\"panel-collapse collapse\" id=\"InformationMenu\">\n    <li>\n      <a href=\"\/otsa\/epqc\/hsrbservice.html\">Human Subject Review Board<\/a>\n    <\/li>\n    <li>\n      <a href=\"\/otsa\/pubs.html\">Publications &#038; Forms<\/a>\n    <\/li>\n    <li>\n      <a href=\"\/otsa\/repstats.html\">Reports &#038; Statistics<\/a>\n    <\/li>\n    <li>\n      <a href=\"\/otsa\/itpubs.html\">Information Technology Publications<\/a>\n    <\/li>\n    <li>\n      <a href=\"\/otsa\/actmanagement\/actcasemanagement.html\">ACT Case Management<\/a>\n    <\/li>\n  <\/ul><\/li>\n\n\n\n\n\n\n\n<!-- INFORMATION LINKS: When adding a link, make sure to include the hyperlink tag <a> around the text-->\n\n\n<!--    <li><a id=\"SocialMenuHeader\"><h2>Connect <i class=\"fa fa-thumbs-o-up fa-fw\"><\/i><\/h2><\/a>\n  <ul id=\"SocialMenu\">\n    <li class=\"facebook\"><a href=\"https:\/\/www.facebook.com\/DEPublicHealth\" title=\"Division of Public Health Facebook Page\" target=\"_blank\"><i class=\"fa fa-facebook-square fa-lg\"><\/i> Facebook<\/a><\/li>\n    <li class=\"twitter\"><a href=\"https:\/\/twitter.com\/Delaware_DHSS\" title=\"Delaware Health and Social Services Twitter Account\" target=\"_blank\"><i class=\"fa fa-twitter-square fa-lg\"><\/i> Twitter<\/a><\/li>\n    <li class=\"googleplus\"><a href=\"#\"><i class=\"fa fa-google-plus-square fa-lg\"><\/i> Google +<\/a><\/li>\n    <li class=\"flickr\"><a href=\"#\"><i class=\"fa fa-flickr fa-lg\"><\/i> Flickr<\/a><\/li>\n    <li class=\"youtube\"><a href=\"#\"><i class=\"fa fa-youtube-square fa-lg\"><\/i> Youtube<\/a><\/li>\n    <li class=\"instagram\"><a href=\"#\"><i class=\"fa fa-instagram fa-lg\"><\/i> Instagram<\/a><\/li>\n    <li class=\"linkedin\"><a href=\"#\"><i class=\"fa fa-linkedin-square fa-lg\"><\/i> Linkedin<\/a><\/li>\n    <li class=\"pinterest\"><a href=\"#\"><i class=\"fa fa-pinterest-square fa-lg\"><\/i> Pinterest<\/a><\/li> \n  <\/ul>\n<\/li>  -->\n<\/ul>\n\n\n\n              <\/div>\n\n            <\/div>\n\n          <\/div>\n\n        <\/div><br>\n\n      <\/div>\n\n\n\n      <div class=\"col-md-9\" id=\"main_content\"> \n\n  <!--[type=HTMLEDIT name=\"Content\"]-->\n\n\n\n<p>\n\n\n  HIPAA requires that a valid authorization be written in plain language, and it must contain the following:\n\n\n<\/p>\n\n\n<h2>\n\n\n  Core elements:\n\n\n<\/h2>\n\n\n<ol class=\"lower-roman\">\n\n\n  <li>A description of the information to be used or disclosed that identifies the information in a specific and meaningful fashion\n\n\n  <\/li>\n\n\n  <li>The name or other specific identification of the person(s), or class of persons, authorized to make the requested use or disclosure.\n\n\n  <\/li>\n\n\n  <li>The name or other specific identification of the person(s), or class of persons, to whom the covered entity may make the requested\n\n\n  use or disclosure.\n\n\n  <\/li>\n\n\n  <li>A description of each purpose of the requested use or disclosure. The statement \u201cat the request of the individual\u201d is a\n\n\n  sufficient description of the purpose when an individual initiates the authorization and does not, or elects not to, provide a statement\n\n\n  of the purpose.\n\n\n  <\/li>\n\n\n  <li>An expiration date or an expiration event that relates to the individual or the purpose of the use or disclosure. The statement\n\n\n  \u201cend of the research study,\u201d \u201cnone,\u201d or similar language is sufficient if the authorization is for a use or\n\n\n  disclosure of protected health information for research, including for the creation and maintenance of a research database or research\n\n\n  repository.\n\n\n  <\/li>\n\n\n  <li>Signature of the individual and date. If the authorization is signed by a personal representative of the individual, a description of\n\n\n  such representative\u2019s authority to act for the individual must also be provided.\n\n\n  <\/li>\n\n\n<\/ol>\n\n\n<h2>\n\n\n  Notification Statements\n\n\n<\/h2>\n\n\n<p>\n\n\n  In addition to the core elements, the authorization must contain statements adequate to place the individual on notice of all of the\n\n\n  following:\n\n\n<\/p>\n\n\n<ol class=\"lower-roman\">\n\n\n  <li>The individual\u2019s right to revoke the authorization in writing, and either:\n\n\n    <ol class=\"upper-alpha\">\n\n\n      <li>The exceptions to the right to revoke and a description of how the individual may revoke the authorization; or\n\n\n      <\/li>\n\n\n      <li>To the extent that the information required by the previous paragraph is included in the required notice of the entity&#8217;s\n\n\n      privacy policy, a reference to the covered entity\u2019s notifying individuals about its privacy policy.\n\n\n      <\/li>\n\n\n    <\/ol>\n\n\n  <\/li>\n\n\n  <li>The ability or inability to condition treatment, payment, enrollment or eligibility for benefits on the authorization, by stating\n\n\n  either:\n\n\n    <ol class=\"upper-alpha\">\n\n\n      <li>The covered entity may not condition treatment, payment, enrollment or eligibility for benefits on whether the individual signs\n\n\n      the authorization when the prohibition on conditioning of authorizations applies (164CFR508(b)4); or\n\n\n      <\/li>\n\n\n      <li>The consequences to the individual of a refusal to sign the authorization when the covered entity is allowed to condition\n\n\n      treatment, enrollment in the health plan, or eligibility for benefits on failure to obtain such authorization.\n\n\n      <\/li>\n\n\n    <\/ol>\n\n\n  <\/li>\n\n\n  <li>The potential for information disclosed pursuant to the authorization to be subject to redisclosure by the recipient and no longer be\n\n\n  protected by this subpart.\n\n\n  <\/li>\n\n\n<\/ol>\n\n\n<p>\n\n\n  An authorization containing these elements (and any others not inconsistent with these elements) can be combined with the research\n\n\n  consent form, unless the HIPAA authorization relates to psychotherapy notes.\n\n\n<\/p>  <!--[END]-->\n\n  \n\n      <\/div>\n\n    <\/div>\n\n  <\/div><!-- \/container -->\n\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Listen Human Subjects Review Board HIPAA Guidelines for Authorization Office of the Secretary &#8211; Administration Menu Home About About Office of the Secretary &#8211; Administration Sections &#038; Programs FAQs Contact Information Office Locations Services Reporting Fraud Information Human Subject Review Board Publications &#038; Forms Reports &#038; Statistics Information Technology Publications ACT Case Management HIPAA requires [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":0,"parent":484,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-486","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/dhss.delaware.gov\/otsa\/wp-json\/wp\/v2\/pages\/486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dhss.delaware.gov\/otsa\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/dhss.delaware.gov\/otsa\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/dhss.delaware.gov\/otsa\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/dhss.delaware.gov\/otsa\/wp-json\/wp\/v2\/comments?post=486"}],"version-history":[{"count":1,"href":"https:\/\/dhss.delaware.gov\/otsa\/wp-json\/wp\/v2\/pages\/486\/revisions"}],"predecessor-version":[{"id":586,"href":"https:\/\/dhss.delaware.gov\/otsa\/wp-json\/wp\/v2\/pages\/486\/revisions\/586"}],"up":[{"embeddable":true,"href":"https:\/\/dhss.delaware.gov\/otsa\/wp-json\/wp\/v2\/pages\/484"}],"wp:attachment":[{"href":"https:\/\/dhss.delaware.gov\/otsa\/wp-json\/wp\/v2\/media?parent=486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}