Health Information Privacy Code (only learned the "title" cards)

Question 1

Rule 1

Answer 1

Purpose of collection of health information

Question 2

Rule 2

Answer 2

Source of health information

Question 3

Rule 3

Answer 3

Collection of health information from individual

Question 4

Rule 4

Answer 4

Manner of collection of health information

Question 5

Rule 5

Answer 5

Storage and security of health information

Question 6

Rule 6

Answer 6

Access to personal health information

Question 7

Rule 7

Answer 7

Correction of health information

Question 8

Rule 8

Answer 8

Accuracy etc of health information to be checked before use

Question 9

Rule 9

Answer 9

Retention of health information

Question 10

Rule 10

Answer 10

Limits on use of health information

Question 11

Rule 11

Answer 11

Limits on disclosure of health information

Question 12

Rule 12

Answer 12

Unique identifiers

Question 13

Rule 1 - Purpose of collection of health information

1 point

Answer 13

Health information is only collected if it is connected to & necessary for functioning of collecting agency

Question 14

Rule 2 - Source of health information

4 points about information collecting circumstances, then 1 more point about information in general

Answer 14

Information collected from patient directly, otherwise:

• By proxy –> authorised by patient
• Patient unable to give authority/incompetent
• NOT if prejudice will arise
• NO NEED if already public information

Patient must not be identified

Question 15

Rule 3 - Collection of health information from individual

2 points

Answer 15

Fully inform what, why information is collected

Disclose intended recipient of information, details of agency storing information

Question 16

Rule 4 - Manner of collection of health information

3 points

Answer 16

NOT collected if unlawful, unfair, intrusive to patient’s personal affairs

Question 17

Rule 5 - Storage & security of health information

2 points

Answer 17

Cannot be accessed by anyone unless with agency authority

Information must be destroyed when no longer needed

Question 18

Rule 6 - Access to personal health information

1 point

Answer 18

Individuals can request to access their information when needed

Question 19

Rule 7 - Correction of health information

2 points

Answer 19

Individuals can correct any information if necessary

If agency is not willing to correct the information, agency must attach the intended correction to existing information

Question 20

Rule 8 - Accuracy etc of health information to be checked before use

4 aspects

Answer 20

Agency must not use information without first checking it is accurate, up to date, complete, relevant

Question 21

Rule 9 - Retention of health information

1 point

Answer 21

Information not kept for longer than required

Question 22

Rule 10 - Limits on use of health information

2 points

Answer 22

Information not used for any other purpose than initially collected, unless patient/proxy has consented & is related to initial purpose

Information may be used if necessary to prevent imminent threat

Question 23

Rule 11 - Limits on disclosure of health information

information NOT to be disclosed unless… 5 points

Answer 23

Authorised by individual & disclosed to individual

Already public information

Disclosure is related to initial purpose of collecting

Necessary to prevent imminent threat

Briefly describes extent of injuries for other organisation [eg. ACC]

Question 24

Rule 12 - Unique identifiers

2 points

Answer 24

No unique identifiers unless necessary for agency to function

Cannot use unique identifiers from other agencies except NHI, registration number [eg. NZMC]