Health Information Privacy Code (only learned the "title" cards) Flashcards
Rule 1
Purpose of collection of health information
Rule 2
Source of health information
Rule 3
Collection of health information from individual
Rule 4
Manner of collection of health information
Rule 5
Storage and security of health information
Rule 6
Access to personal health information
Rule 7
Correction of health information
Rule 8
Accuracy etc of health information to be checked before use
Rule 9
Retention of health information
Rule 10
Limits on use of health information
Rule 11
Limits on disclosure of health information
Rule 12
Unique identifiers
Rule 1 - Purpose of collection of health information
1 point
Health information is only collected if it is connected to & necessary for functioning of collecting agency
Rule 2 - Source of health information
4 points about information collecting circumstances, then 1 more point about information in general
Information collected from patient directly, otherwise:
- By proxy –> authorised by patient
- Patient unable to give authority/incompetent
- NOT if prejudice will arise
- NO NEED if already public information
Patient must not be identified
Rule 3 - Collection of health information from individual
2 points
Fully inform what, why information is collected
Disclose intended recipient of information, details of agency storing information
Rule 4 - Manner of collection of health information
3 points
NOT collected if unlawful, unfair, intrusive to patient’s personal affairs
Rule 5 - Storage & security of health information
2 points
Cannot be accessed by anyone unless with agency authority
Information must be destroyed when no longer needed
Rule 6 - Access to personal health information
1 point
Individuals can request to access their information when needed
Rule 7 - Correction of health information
2 points
Individuals can correct any information if necessary
If agency is not willing to correct the information, agency must attach the intended correction to existing information
Rule 8 - Accuracy etc of health information to be checked before use
4 aspects
Agency must not use information without first checking it is accurate, up to date, complete, relevant
Rule 9 - Retention of health information
1 point
Information not kept for longer than required
Rule 10 - Limits on use of health information
2 points
Information not used for any other purpose than initially collected, unless patient/proxy has consented & is related to initial purpose
Information may be used if necessary to prevent imminent threat
Rule 11 - Limits on disclosure of health information
information NOT to be disclosed unless… 5 points
Authorised by individual & disclosed to individual
Already public information
Disclosure is related to initial purpose of collecting
Necessary to prevent imminent threat
Briefly describes extent of injuries for other organisation [eg. ACC]
Rule 12 - Unique identifiers
2 points
No unique identifiers unless necessary for agency to function
Cannot use unique identifiers from other agencies except NHI, registration number [eg. NZMC]
