May a HIPAA Notice of Privacy Practices (NPP) specifically mention that protected health information (PHI) will be disclosed to and through a health information organization (HIO)? May the NPP mention that the covered health care provider uses an electronic health record (EHR)?
Can a health information organization (HIO) participate as part of an affiliated covered entity?
Can a health information organization (HIO) participate as part of an organized health care arrangement (OHCA)?
Can a health information organization (HIO), as a business associate, exchange protected health information (PHI) with another HIO acting as a business associate?
What are some considerations in developing and implementing a business associate agreement with a health information organization (HIO)?
Can a health information organization (HIO) operate as a business associate of multiple covered entities participating in a networked environment?
Is a health information organization (HIO) covered by the HIPAA Privacy Rule?
Does the HIPAA Privacy Rule permit a covered entity to disclose psychotherapy notes to or through a health information organization (HIO)?
Can a covered entity use existing aspects of the HIPAA Privacy Rule to give individuals the right to decide whether sensitive information about them may be disclosed to or through a health information organization (HIO)?
Who has the right to consent or the right to request restrictions with respect to whether a covered entity may electronically exchange a minor’s protected health information to or through a health information organization (HIO)?