Verification of Identity of Those Requesting PHI Sample Clauses

Verification of Identity of Those Requesting PHI. ‌ A. Policy‌ The Company must verify the identity and authority of individuals requesting PHI before providing such PHI. B. Procedures‌ Workforce members must take steps to verify the identity of individuals who request PHI. They must also verify the authority of any person to have access to PHI, if the identity or authority of such person is not known. Separate procedures are set forth below for verifying the identity and authority, depending on whether the request is made by the individual, a parent seeking access to the PHI for his or her minor child, an authorized personal representative under applicable law, or a public officer. Similarly reasonable steps should be taken to verify the identity of personnel from Covered Entities that seek access to the Covered Entity’s PHI. (i) When an individual requests access to his or her own PHI, the following steps must be followed: (a) If the individual requests PHI in person, Workforce members must request a form of identification. Workforce members may rely, for example, on a valid driver’s license, passport or other photo identification issued by a government agency; (b) If the individual requests PHI over the telephone, the Workforce member must verify the individual’s identity by requesting all of the following information: i) address, ii) date of birth, and iii) Social Security number, or other unique identifier as appropriate; (ii) When a parent requests access to the PHI of the parent’s minor child, seek reasonable verification of the person’s relationship with the child. However, applicable state or other laws may, in select circumstances, limit parental access to a minor’s PHI for certain sensitive services where a minor is authorized to personally consent to treatment without parental consent (e.g., regarding HIV/AIDS treatment, or treatment for sexually transmitted illness) and the Privacy Officer should be consulted regarding parental inquiries with respect to these types of services; (iii) When a personal representative requests access to an individual’s PHI, the following steps should be followed: (a) Require a copy of a valid power of attorney or other officer documentation that authorizes the individual to access the requested PHI under applicable state or other law (such as court-appointment as a guardian or trustee, appointment under a power of attorney or health care proxy, or appointment as executor of an estate). With respect to a living individual, the documentation must grant the personal...