60-Day Proposed Information Collection: Indian Health Service Forms To Implement the Privacy Rule; Request for Public Comment

In compliance with Section 3506(c)(2)(A) of the Paperwork Reduction Act of 1995, which requires 60 days for public comment on proposed information collection projects, the Indian Health Service (IHS) is publishing for comment a summary of a proposed information collection to be submitted to the Office of Management and Budget (OMB) for review. Proposed Collection: Title: 0917-0030, ``IHS Forms to Implement the Privacy Rule (45 CFR Parts 160 & 164)''. Type of Information Collection Request: Extension, without revisions, of currently approved information collection, 0917-0030, ``IHS Forms to Implement the Privacy Rule (45 CFR Parts 160 & 164)''. Form Number(s): IHS-810, IHS-912-1, IHS-912-2, IHS-913 and IHS-917. Need and Use of Information Collection: This collection of information is made necessary by the Department of Health and Human Services Rule entitled ``Standards for Privacy of Individually Identifiable Health Information'' (Privacy Rule) (45 CFR parts 160 and 164). The Privacy Rule implements the privacy requirements of the Administrative Simplification subtitle of the Health Insurance Portability and Accountability Act of 1996, creates national standards to protect individual's personal health information, and gives patients increased access to their medical records. 45 CFR 164.508, 164.522, 164.526 and 164.528 of the Rule require the collection of information to implement these protection standards and access requirements. The IHS will continue to use the following data collection instruments to meet the information collection requirements contained in the Rule. 45 CFR 164.508: This provision requires covered entities to obtain or receive a valid authorization for its use or disclosure of protected health information for other than for treatment, payment and healthcare operations. Under the provision individuals may initiate a written authorization permitting covered entities to release their protected health information to entities of their choosing. The form IHS-810 ``Authorization for Use or Disclosure of Protected Health Information'' is used to document an individual's authorization to use or disclose their protected health information. 45 CFR 164.522: Section 164.522(a)(1) requires a covered entity to permit individuals to request that the covered entity restrict the use and disclosure of their protected health information. The covered entity may or may not agree to the restriction. The form IHS-912-1 ``Request for Restrictions(s)'' is used to document an individual's request for restriction of their protected health information, and whether IHS agreed or disagreed with the restriction. Section 164.522(a)(2) permits a covered entity to terminate its agreement to a restriction if the individual agrees to or requests the termination in writing. The form IHS-912-2 ``Request for Revocation of Restriction(s)'' is used to document the agency or individual request to terminate a formerly agreed to restriction regarding the use and disclosure of protected health information. 45 CFR 164.528 and 45 CFR 5b.9(c): This provision requires covered entities to permit individuals to request that the covered entity provide an accounting of disclosures of protected health information made by the covered entity. The form IHS-913 ``Request for an Accounting of Disclosures'' is used to document an individual's request for an accounting of disclosures of their protected health information and the agency's handling of the request. 45 CFR 164.526: This provision requires covered entities to permit an individual to request that the covered entity amend protected health information. If the covered entity accepts the requested amendment, in whole or in part, the covered entity must inform the individual that the amendment is accepted. If the covered entity denies the requested amendment, in whole or in part, the covered entity must provide the individual with a written denial. The form IHS-917 ``Request for Correction/Amendment of Protected Health Information'' will be used to document an individual's request to amend their protected health information and the agency's decision to accept or deny the request. Completed forms used in this collection of information are filed in the IHS medical, health and billing record, a Privacy Act System of Records Notice. Affected Public: Individuals and households. Type of Respondents: Individuals. Burden Hours: The table below provides the estimated burden hours for this information collection: