HIPAA - Frequently Asked Questions

Accounting of Disclosures

1. How can I get an accounting?

Complete the written request form and return to the Unit Privacy Officer.

2. How long will it take to get the accounting?

The University is required to respond to your written request within 60 days. If we can't provide the accounting in that time frame and need an extension, we'll send you a letter before the end of the 60 day period advising you of the reason for the delay and when we'll be able to provide the accounting, which will be no later than 30 additional days.

3. How much will it cost to get an accounting?

There's no fee charged for the first accounting requested in a 12 month period. For any additional request for an accounting that you make in the same 12 month period, you will be charged a reasonable cost-based fee, which you will be told the amount of at the time you make the request. 

4. How far back in time will the accounting go?

Unless you specify a shorter time frame, your accounting will include disclosures of your health information made within the six years prior to the date of your request. However, we are not required to include any disclosures made before April 14, 2003, so we can't provide you with any information about disclosures made before that time.

5. What types of disclosures will be included in the accounting?

Your accounting will include the following types of disclosures of your health information to:
- public health authorities
- food and drug administration
- health oversight agencies
- law enforcement

Your accounting will not include disclosures:
- made to carry out treatment, payment or health care operations
- made directly to you
- made in response to an authorization signed by you allowing release to another person or organization
- made through our facility's directory
- made to persons involved in your care or that must be notified of your care
- made prior to April 14, 2003

6. What information will I get about each disclosure in the accounting?

For each disclosure in the accounting, you will receive:
- the date of the disclosure
- the name of the organization or person that received your health information
- a brief description of the disclosure
- the reason the disclosure was made

7. What can I do if I find that you have disclosed my health information to someone who shouldn't have it?

If you believe that someone has disclosed your health information improperly, you may contact the Unit Privacy Officer, who can provide you with the information about your privacy rights and what you can do. In addition, you may also refer to the Notice of Privacy Practices, which includes information about who to contact and how to file a complaint.

8. What if I find that disclosures that I know you made aren't listed in the accounting?

Most of the disclosures made of your health information are for your treatment and payment, and they do not need to be listed in the accounting. So disclosures made to your health care providers and/or your insurance company will not be listed in the accounting. But if you believe a disclosure that should have been listed is not listed in the accounting, you may contact the Unit Privacy Officer.