The hospital protects the privacy and confidentiality of health information.

(1)

The hospital develops and implements policies and procedures addressing the privacy and confidentiality of health information. Note: For hospitals that use Joint Commission accreditation for deemed status purposes and have swing beds: Policies and procedures also address the resident’s personal records.

(2)

The hospital discloses health information only as authorized by the patient with the patient's written consent or as otherwise required by law and regulation. Note: For hospitals that use Joint Commission accreditation for deemed status purposes and have swing beds: The hospital allows representatives of the Office of the State Long-Term Care Ombudsman to examine a resident’s medical, social, and administrative records in accordance with state law.

(3)

The hospital develops and implements policies and procedures for the release of medical records. The policies and procedures are in accordance with law and regulation, court orders, or subpoenas. Note: Information from or copies of records may be released only to authorized individuals, and the hospital makes certain that unauthorized individuals cannot gain access to or alter patient records.