41
Copyright 2018 KenCrest Services CONFIDENTIALITY As a requirement under IDEA, knowledge of confidentiality policies and procedures is required for all persons collecting or using personally identifiable information, both special and general education.

CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

  • Upload
    others

  • View
    5

  • Download
    0

Embed Size (px)

Citation preview

Page 1: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

CONFIDENTIALITY

As a requirement under IDEA, knowledge of confidentiality policies

and procedures is required for all persons collecting or using personally identifiable information, both special

and general education.

Page 2: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

CONFIDENTIALITY LAWS Early Intervention confidentiality practices all fall under the umbrella of each of these laws. Early Intervention records are also considered educational records under IDEA, which relates to how EI records are subject to FERPA.

1. FERPA-Family Education Rights and Privacy Act 2. HIPAA-Health Insurance Portability and Accountability Act of

1996 3. IDEA-Individuals With Disabilities Education Act, Part C

(federal register- CFR 34 300.561-300.572) 4. Early Intervention Regulations 4226 (passed in 2003)

Page 3: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

FERPA: FAMILY EDUCATION RIGHTS & PRIVACY ACT

Passed in 1974-Also called the “Buckley Amendment”

Access on the web at: http://www.ed.gov/policy/gen/reg/ferpa/index.html

Addresses maintenance of confidential records

Informs families of their right to review and inspect confidential records

Provides families of their right to amend any records they feel are inaccurate or misleading.

Notification/Fact Sheet provided to families annually

Page 4: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

HIPAA

• Notice of Privacy Practices provided and signed by parent at Intake

• Personally identifiable information cannot be sent via unsecure methods such as e-mail communications unless in a password protected document.

• Specific consent to disclose health information required

• Obtain consent to leave personal/health info via voice mail

• Confidential information must be maintained in a closed or locked area where a list of only those personnel authorized to access records is posted- referred to as ‘record of access”

Offers safeguarding of personally identifiable information through various protections

Page 5: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

WHAT IS PERSONALLY IDENTIFIABLE INFORMATION?

• Name of child, child’s parents or other family member

• Address of the child or child’s family

• Any personal identifier (SS #)

• Information which may make it possible to reasonably identify an individual, such as a list of personal characteristics or other indirect references. (Example: the girl in the 2 yr. old class with red hair…)

Page 6: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

DEFINITION OF EDUCATION RECORDS

Records, files, documents and other materials which contain information directly related to a child and are maintained by an educational agency or institution, or by a person acting for such agency or institution.

Page 7: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

DEFINITION OF EDUCATION RECORDS

Education records not covered in this section include records of instructional, supervisory and administrative personnel which are in the sole possession of the maker and are not revealed or accessible to any other person.

Page 8: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SOLE POSSESSION RECORDS

Sole Possession Records are exempt from parent access if they meet the following:

• Must be a private note created solely by the individual possessing the note

• Must be a personal memory aid

• Not be used to develop a “plan” for the student

AND/OR

• The information in the note must not be

accessible or revealed to any other person

Page 9: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

WHAT IS CONFIDENTIALITY?

• Specific protection of private, identifying information

• Strict limitations around access, disclosure, retention and safeguarding of records.

• Specific regulations and professional code of ethics that regulate the disclosure of information-nothing can be disclosed without consent for release of information

Page 10: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

CONSENT FOR DISCLOSURES

• Consents must be signed by parent/guardian, or a trained surrogate or (in the event a child is in custody of CYF) a CYF worker.

• Written consent signed and dated, including

description of records disclosed

purpose of the release

parties to whom disclosure is made

Statement of right to revoke request and consent to release

Page 11: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

CONSENT FOR DISCLOSURES

• Copy of disclosed records provided to parent upon request.

• Third party disclosure prohibited without written consent of parent, except in specific circumstances.

Page 12: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

CONDITIONS WHERE PRIOR CONSENT NOT REQUIRED

• Disclosure within agency as per record of access rule (Record of access rule: All individuals within an agency who are granted access to records should be posted outside the cabinets/records area. These individuals would fall under the record of access rule).

• Note: Subpoenas are insufficient without a court order

• Records are disclosed without consent in the case of a request that is part of a Pennsylvania CYF abuse investigations

• Court order (Subpoena alone is not sufficient to disclose without written release)

• Health and safety emergencies (such as an abuse investigation)

Page 13: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

HIV CONSIDERATIONS CONFIDENTIALITY OF HIV-RELATED INFORMATION ACT

• Provides very specific protections and limitations on disclosure for any persons with HIV

• HIV information cannot be shared without a specific signed release with the legal notice that must accompany the disclosure.

• Legal disclosure prohibits re-disclosure to any other parties –general medical releases are not sufficient to release specific HIV information.

Page 14: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

PARENT’S RIGHT TO INSPECT AND REVIEW RECORDS

• Right to review records within a reasonable period of time of written request

• Right to have representative review records

• Right to response to requests for explanation and interpretation of records

• Right to inspect only information related to own child

• Rights extend to both parents unless otherwise indicated by law

• Right to obtain copies of records

Page 15: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

• Any parent explanation of disagreement with records must be maintained with record as long as the agency maintains the record & disclosed with the record.

• Parents are provided with FERPA and a Fact sheet annually which provides notification of right to request amendment of records.

• Parent has the right to request amendment of records if information is inaccurate, misleading or in violation of privacy rights.

AMENDMENT OF RECORDS

Page 16: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

DESTRUCTION OF INFORMATION

• Records are not destroyed if there is an outstanding inspection request or litigation

• Information no longer needed destroyed at parents' request

• Permanent record maintained for a period of four years from date of closure

Page 17: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

CONFIDENTIALITY IN PRACTICE

• Staff should be aware of confidentiality laws and requirements.

• Agencies have a responsibility to train all persons annually regarding confidentiality, personally identifiable information and disclosure.

• Staff must not disclose information to others without expressed written release.

• Staff should be sensitive to violations of confidentiality in verbal exchanges with others.

Page 18: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

CONFIDENTIALITY MAY BE VIOLATED

• When staff discusses a child in inappropriate places or situations

• When staff repeats gossip or rumors about a child or his family

We think about confidential records and are careful to keep records locked up and not released to outsiders, but we sometimes forget about what we discuss verbally in public places as posing a potential breach to confidentiality.

Page 19: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

Gossip vs. Professional Sharing Of Information

When talking to a colleague about a student or his family, apply these four tests to see if the discussion may be violating the child’s confidentiality rights.

Page 20: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

FOUR TESTS

1. What is discussed

2. Where the discussion takes place

3. Who is listening

4. Why the discussion took place

Page 21: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

WHAT IS DISCUSSED

• If the discussion involves personally identifiable information that is confidential (disability, family data, etc.), the parties should be sure that mutual professional interest is involved.

• If the discussion involves information that is rumor, opinion, or hearsay, chances are that confidentiality will be in question, and the parties have moved from professionalism to gossip.

Page 22: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

WHERE THE DISCUSSION TAKES PLACE

• If the discussion occurs in a private place (such as a private office or meeting room), there is no problem with confidentiality.

• If the discussion occurs in a public place (such as the playground, the halls, the supermarket), there is a good chance that confidentiality could be violated.

Page 23: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

WHO IS LISTENING

1. If the parties to the discussion have a shared professional interest (such as IFSP team members) there is no problem with confidentiality.

2. If others are listening who have do not have a direct/shared interest (such as a coworker who is eavesdropping) confidentiality may be violated.

Page 24: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

WHY THE DISCUSSION TOOK PLACE

• If the parties have mutual professional interest in a child and are sharing information that will help them work with the child or family, then there is no problem with confidentiality

• If the parties are gossiping to pass time, carrying tales about a child or his family, or for other non-educational reasons, there is probably a concern for violating confidentiality.

Page 25: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SAMPLE SITUATIONS

Page 26: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SAMPLE ONE

Two Provider program staff sharing a child, another Provider who does not serve the child walks in, the first two keep talking, the third listens in, adds to discussion

1. What are they discussing?

2. Does the third provider have a legitimate mutual interest in the child?

3. Is the location inappropriate?

4. Why are they discussing the child?

Page 27: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SAMPLE ONE

If the providers were discussing the child in private (no other providers in the room or not within earshot of others) and they had a legitimate mutual interest in the child, they were probably not violating the child’s confidentiality, but they should monitor what they say if others come in.

Page 28: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SAMPLE TWO

Two interventionists see each other in the grocery store, start talking about a child they serve (“I hear the father drinks and beats the mother. No wonder the child has so many problems.”)

1. Inappropriate place

2. Others listening

3. Content not appropriate

Page 29: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SCENARIOS

Page 30: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SCENARIO ONE

When asked if her confidential files were secured, the teacher replied, “Yes. I keep them in my desk drawer, and when I leave the room, I lock the door to my room”.

No.

Was she correct?

Her files are not secure because anyone with a key has access. It is better to have a file cabinet or desk with a lock.

Page 31: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SCENARIO TWO

The teacher keeps a folder in which she records notes about the children she serves. As the teacher is making notes in the folder, a parent comes in and, noticing the folder, asks to see notes relating to her child. The teacher refuses on the grounds that her notes are not educational records and, therefore, not accessible by the parent.

Yes.

Is the teacher correct in her position?

If she does not show or reveal the contents of the notes to anyone, if she uses them as a memory aid, and if they remain her private notes in her sole possession. However, if she shares the information with anyone, it becomes an educational record.

Page 32: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SCENARIO THREE

An agency posts on the main office bulletin board a list of all the children served in their birth to three program. A Service Coordinator hangs a list of children on their caseload above their desk.

Yes.

Was confidentiality violated?

Any visible list that singles children out violates confidentiality.

Page 33: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SCENARIO FOUR

• A Service Coordinator was updating a plan and leaves a child’s file out on their desk when they leave for the night.

• A provider agency staff person leaves a child’s file on the conference room table while she breaks for lunch.

Is there a violation of confidentiality?

Page 34: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SCENARIO FOUR

Yes.

Leaving confidential files out on a desk could lead to a potential for violating confidentiality.

Unauthorized persons (such as maintenance staff) who would not be on the record of access could have access to the records. Typically, during business hours only those persons authorized on the record of access would be present – outsiders are asked to sign-in and should not be unattended during their visits. Files should never be left unattended in shared common space such as a conference room. This is especially a concern for providers who run multiple programs out of a central office where those agency staff working for adult programs would not be authorized to see the Infant Toddler records.

Page 35: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SCENARIO FIVE

The father of a child requests to see the records of his son who is being served by Early Intervention. The parents are divorced and the son lives with his mother. The agency refused to disclose the boy’s record to the father.

Yes.

Was there a violation of parent access to records?

Unless the agency has been provided with evidence that there is a court order, state statute or legally binding document relating to such matters as divorce, separation, or custody that specifically revokes these rights.

Page 36: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

SCENARIO SIX

The secretary in the office has constant access to child information as she files documentation of all children, sends letters to families, etc. All of these records are considered confidential in nature.

What advice can you offer the secretary concerning information she might access?

Inform her that the information is confidential and contains sensitive information. Since all agencies must protect the confidentiality of personally identifiable information, it is important that all staff having access to such information receive training.

Support staff should also be listed on the Record of access.

Page 37: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Copyright 2018 KenCrest Services

Completion Instructions

IMPORTANT ! (please read instructions below)

It is important that you:

• Print and complete Quiz

• Print the Certificate; add your NAME, Signature and date and return to your supervisor (or, to Maureen Meenan at [email protected]) along with the Quiz Results.

Page 38: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Confidentiality Training P a g e | 1 o f 3

Created with iSpring QuizMaker 2017/2018 PDF

Name: Date:

1. HIPAA stands for Health Care is Private and Accountable.

( ) True

( ) False

2. There is only one law that governs use and release of confidential information in Early

Intervention settings

( ) True

( ) False

3. The Family Education Rights & Privacy Act is sometimes referred to as the “Buckley

Amendment.” ( ) True

( ) False

4. The HIPAA Privacy Rule was created to give an individual access to and control over their

own personal medical information.

( ) True

( ) False

5. Wherever the laws governing Early Intervention Services are more stringent, they supersede

HIPAA. ( ) True

( ) False

6. HIPAA provides for protections of personally identifiable information only when individually

identifiable health information is transmitted electronically

( ) True

( ) False

7. It is okay to disclose Protected Health Information to a CYF worker investigating abuse of a

child without getting consent from the family. ( ) True

( ) False

Page 39: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Confidentiality Training P a g e | 2 o f 3

Created with iSpring QuizMaker 2017/2018 PDF

Name: Date: 8. If a family requests amendment of their child’s record, the agency is only required to

store that amendment in the case record for one year.

( ) True

( ) False

9. Early Intervention staff needs the family’s permission to report suspected or actual child

abuse to the appropriate authority. ( ) True

( ) False

10. A general medical release of information is sufficient to release specific HIV

information. ( ) True

( ) False

11. Parents should not expect to gain access to their child’s record until they get

discharged from the program.

( ) True

( ) False

12. As long as you use a quiet voice when discussing client information with another

professional, it is okay if another co-worker overhears the conversation. ( ) True

( ) False

13. An agency that provided services to a child must keep that child’s record on file

permanently.

( ) True

( ) False

14. Records of instructional, supervisory & administrative personnel which are in the sole

possession of the maker and not revealed or accessible to any other person are still

considered part of the Education record. ( ) True

( ) False

Page 40: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

Confidentiality Training P a g e | 3 o f 3

Created with iSpring QuizMaker 2017/2018 PDF

Name: Date:

15. If the parties to the discussion have a shared professional interest such as IFSP team

members, there is no problem with confidentiality

( ) True

( ) False

16. A teacher who keeps her case files in her desk drawer and locks her door when she leaves is complying with confidentiality regulations governing security and access to confidential records. ( ) True

( ) False

17. It is okay to post a list of all the children’s birthdays served in the EI program. ( ) True

( ) False

18. It’s ok to throw a used CD-Rom into the trash can that has client information stored on

it.

( ) True

( ) False

19. Once a visitor has signed in at the front desk, it is not necessary to escort them during their

visit.

( ) True

( ) False

20. If the parents of a child in an EI program are divorced, the agency only needs to disclose the child’s case record to one of the parents. ( ) True

( ) False

Put your name and date on the certificate, keep a copy for your records and email a copy to Maureen Meenan

[email protected], along with a copy of this completed quiz.

Page 41: CONFIDENTIALITY€¦ · persons annually regarding confidentiality, personally identifiable information and disclosure. • Staff must not disclose information to others without expressed

`

This is to certify that has completed (Print Name)

1 Hour(s) of Confidentiality (no breaks) (name of training)

on at KenCrest Online Module (Date) (Location)

Presented by: Pam Schaefer, Program Coordinator, Staff Training and Development

Provider Signature:

2017/ 2018 PDF