02 — Capability · BC-1880.20
Release of Information
Give patients, their representatives and other authorized parties the health information they are entitled to, accurately, securely and within legal deadlines, and record every disclosure. Legal holds and discovery are records management.
- ROI
- Disclosure Management
- Health Record Access Requests
In scope
- Patient right-of-access requests
- Authorization checks for third-party requests
- Subpoenas and court orders for health records
- Disclosure accounting, sensitive record protection and information blocking exceptions
Out of scope
- Legal holds and e-discovery (see BC-790.20)
- The organization-wide privacy program and obligations (see BC-140.10.30)
- Sharing data with other providers for treatment (see BC-1880.30)
Realized by · 2
- Epic · MyChartcore via BC-1880.20.10
- InterSystems HealthShare · Consent Managementstrong via BC-1880.20.50
Used in · 0
- Not yet placed on a value stream.
Build it · 0
- Nothing in the library points here yet.
Governed by · 1
Decomposes into · 6
- BC-1880.20.10Right of Access RequestsFulfill patients' requests for their own records in the format they ask for, within the legal deadline and at a lawful fee.
- BC-1880.20.20Third-Party Request ReviewCheck that each third-party request carries a valid authorization or legal basis, and release only the minimum information it allows.
- BC-1880.20.30Legal Process RequestsRespond to subpoenas, court orders and law enforcement requests for health records, checking each against health privacy rules before release.
- BC-1880.20.40Disclosure AccountingLog every disclosure made for purposes other than treatment, payment and operations, so patients can get an accounting on request.
- BC-1880.20.50Sensitive Record ProtectionApply the stricter consent and release rules for sensitive records such as substance use, behavioral health, reproductive and genetic information.
- BC-1880.20.60Information Blocking ReviewRelease electronic health information without unreasonable delay or interference, as information blocking rules require, and document each time an exception is relied on.