You should ALWAYS report any potential incidents to your HCO, but in which of the following scenarios
would an incident NOT need to be reported to the Office for Civil Rights?
There is a
reasonable belief
that the information
disclosed will not
be used
maliciously.
You think
information was
only impermissibly
viewed, not taken,
but you can't fully
confirm.
You have no way of
telling what was
actually done with
the information.
Incidents should
only be reported to
the OCR after the
PHI is actually used
maliciously and you
have proof.
would an incident NOT need to be reported to the Office for Civil Rights?
There is a
reasonable belief
that the information
disclosed will not
be used
maliciously.
You think
information was
only impermissibly
viewed, not taken,
but you can't fully
confirm.
You have no way of
telling what was
actually done with
the information.
Incidents should
only be reported to
the OCR after the
PHI is actually used
maliciously and you
have proof.