Certification and Amendment

Op10.03-3 Certification and Amendment

Applies to the Administrative Requirements of the Health Insurance Portability and Accountability Act of 1996. 45 CFR Section 164.504(f)

Policy

The Employee Benefit Plan does not disclose PHI to Southwest Missouri State University, except in the manner and for the purposes specifically permitted under the Privacy Rule. Missouri State University has certified that plan documents have been amended before April 14, 2003.

Procedure

  • The Employee Benefit Plan only discloses PHI to Missouri State University if one of the following applies:
  • The Employee Benefit Plan receives written authorization from the participant to disclose PHI to Missouri State University;
  • The Employee Benefit Plan discloses information to Southwest Missouri State University on whether an individual is participating in the Employee Benefit Plan;
  • The Employee Benefit Plan provides Missouri State University with PHI in the form of Summary Health Information for the purpose of obtaining premium bids from health insurance issuers;
  • The Employee Benefit Plan provides Missouri State University with PHI in the form of Summary Health Information for the purpose of assessing modifying, amending, or terminating the Employee Benefit Plan; or
  • The Employee Benefit Plan receives certification from Southwest Missouri State University that the plan documents have been modified as required by the Privacy Rule, and the uses and disclosures of PHI by Southwest Missouri State University will be restricted to plan administration functions performed by Missouri State University on behalf of the Employee Benefit Plan in accordance with the plan document.
  • The Employee Benefit Plan has received certification from Southwest Missouri State University that Missouri State University will not use the PHI for any employment-related decisions and that plan documents have been amended as required before disclosing PHI to Missouri State University.
  • The Employee Benefit Plan includes a separate statement in its Notice of Privacy Practices informing participants that PHI may be disclosed to Missouri State University.
  • The Employee Benefit Plan only discloses the minimum necessary amount and type of PHI to Missouri State University.

Effective Date: April 14, 2003