SUBCHAPTER 05J ‑ CONFIDENTIALITY OF CLIENT DATA
SECTION .0100 ‑ DEFINITIONS FOR CONFIDENTIALITY OF
CLIENT DATA
10A NCAC 05J .0101 DEFINITIONS FOR CONFIDENTIALITY OF
CLIENT DATA
Unless the context clearly specifies otherwise, the
following terms are defined as follows:
(1) "Agency" means Division of Aging, Area
Agencies on Aging, or service provider.
(2) "Client" means any applicant for, or
recipient of, services administered under the auspices of the Division of
Aging.
(3) "Client information" or "client
record" means any information, whether recorded or not, including
information stored in computer data banks or files, relating to a client which
was received in connection with the performance of any function of the agency.
(4) "Court order" means any written order
from a judge which directs explicitly the release of client information.
(5) "Service provider" means any public or
private agency from whom Division of Aging funded services are purchased or
authorized.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. December 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
SECTION .0200 ‑ REQUIREMENTS
10A NCAC 05J .0201 CONFIDENTIALITY OF CLIENT DATA
(a) Client information obtained by the Division of Aging,
Area Agencies on Aging or service providers from an older person or their
designated representative shall not be disclosed in a form that identifies the
person without the informed consent of the person or legal representative
unless the disclosure is required by court order, or for program monitoring by
authorized federal, state, or other designated monitoring agencies.
(b) The agency shall assure that all authorized individuals
are informed of the confidential nature of client information and shall
disseminate written policy to and provide training for all persons with access
to client information.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. November 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
10A NCAC 05J .0202 INFORMATION FROM OTHER COMMUNITY
SERVICE ORGANIZATIONS
If the agency receives information from another community
service organization or individual, then such information shall be treated as
any other information generated by the State Division of Aging, Area Agency on
Aging or service provider and disclosure thereof will be governed by any
condition imposed by the furnishing community service organization or
individual.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. November 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
10A NCAC 05J .0203 DISCLOSURE PURSUANT TO OTHER LAWS
Whenever federal or state statutes or regulations
specifically address confidentiality issues, the agency shall disclose or keep
confidential client information in accordance with those federal or state
statutes or regulations.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. November 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
10A NCAC 05J .0204 OWNERSHIP OF RECORDS
All client information contained in any records of the
agency is the property of the agency. Employees of the agency shall protect
and preserve such information from dissemination except as indicated by the policies
established.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. November 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
10A NCAC 05J .0205 SECURITY OF RECORDS
(a) The agency shall provide a secure place with controlled
access for the storage of client records or reports, or both, which contain
client specific information.
(b) Only employees, students, volunteers or other
individuals who must access client information in order to carry out duties
assigned or approved by the agency shall be authorized to have access to such
information.
(c) Only authorized individuals may remove a record or
report, or both, from the storage area and that individual shall be responsible
for the security of the record until it is returned to the storage area.
(d) The agency shall be allowed to destroy records in
accordance with Record Retention Schedules promulgated by the Division of
Archives and History, and state and federal statutes and regulations.
(e) Area Agencies on Aging and service providers shall
establish written procedures to prevent accidental disclosure of client
information from automated data processing systems.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. December 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
10A NCAC 05J .0206 RELEASE OF CLIENT INFORMATION
(a) No client identifying information, except as referenced
in Rule .0205 of this Section, which is maintained by the Division of Aging,
Area Agency on Aging or service provider shall be released to other individuals
or community service organizations without obtaining a signed consent for
release of information from the client or legal guardian.
(b) The consent for release of information shall include,
at a minimum, the following items:
(1) Name of the provider and recipient of the
information;
(2) The extent of information to be released;
(3) The name and dated signature of the client
or client representative;
(4) A statement that the consent is subject to
revocation at any time except to the extent that action has been taken in
reliance on the consent;
(5) Length of time the consent is valid.
(c) The client may alter the form to contain other
information which may include but is not limited to:
(1) A statement specifying the date, event or
condition upon which the consent may expire even if the client does not
expressly revoke the consent;
(2) Specific purpose for the release.
(d) A copy of the signed consent for release of information
shall be maintained in the client record.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. November 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
10A NCAC 05J .0207 INFORMED CONSENT
Prior to obtaining a consent for release of information, the
delegated representative shall explain the meaning of informed consent. The
client shall be told the following:
(1) Contents to be released;
(2) That there is a definite need for the information;
(3) That the client can give or withhold the consent
and the consent is voluntary;
(4) That there are statutes and regulations protecting
the confidentiality of the information.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. November 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
10A NCAC 05J .0208 CLIENT ACCESS TO RECORDS
(a) Access to information about himself is the right of the
client. Upon written or verbal request, the client shall have access to review
or obtain without charge a copy of the information in his records with the
following exceptions:
(1) Information that the agency is required to
keep confidential by state or federal statutes or regulations;
(2) Confidential information originating from
another community service organization;
(3) Information that would breach another
individual's right to confidentiality.
(b) Client's requesting access to the information contained
in his record as promptly as feasible but no more than five working days after
receipt of the request.
(c) The Director or his delegated representative shall be
present when the client reviews the record.
(d) The Director or his delegated representative must
document in the client record the review of the record by the client.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. December 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
10A NCAC 05J .0209 CONTESTED INFORMATION
(a) A client may contest the accuracy, completeness or
relevancy of the information in his record.
(b) A correction of the contested information, but not the
deletion of the original information if it is required to support receipt of
state or federal financial participation, shall be inserted in the record when
the Director or his designee concurs that such correction is justified.
(c) When the Director or his delegated representative does
not concur, the client shall be allowed to enter a statement in the record.
(d) Such corrections and statements shall be made permanent
part of the record and shall be disclosed to any recipient of the disputed
information.
(e) If a delegated representative decides not to correct
contested information, the decision not to correct shall be reviewed by the
supervisor of the person making the initial decision.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. November 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
10A NCAC 05J .0210 WITHHOLDING OF INFORMATION FROM THE
CLIENT
(a) When the Director or delegated representative
determines on the basis of the exceptions outlined in Rule .0208 of this
Section to withhold information from the client record, this reason shall be
documented in the client record.
(b) The Director or delegated representative must inform
the client that information is being withheld, and upon which of the exceptions
specified in Rule .0208 of this Section the decision to withhold the information
is based.
(c) If confidential information originating from another
community service organization is being withheld, the client shall be referred
to that community service organization for access to the information.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. November 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
10A NCAC 05J .0211 DISCLOSURE OF CLIENT INFORMATION
WITHOUT CLIENT CONSENT
Client information included in the client record may be
disclosed without the consent of the client under the following circumstances:
(1) To other employees of the agency for the purpose of
making referrals, supervision, consultation or determination of eligibility.
(2) Between the service provider, Area Agency on Aging
and Division of Aging for the purposes of reporting.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. November 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.
10A NCAC 05J .0212 INFORMATION NEEDS OF SERVICE PROVIDERS
(a) Client information may be disseminated to service
providers in accordance with the release of information statement included on
the client registration form.
(b) Any further disclosure will require a signed release of
information form from the client.
History Note: Authority G.S. 143B‑181.1(c); 143B‑181.10;
Eff. November 1, 1991;
Pursuant to G.S. 150B-21.3A, rule is necessary without
substantive public interest Eff. May 23, 2015.