Scope of this standard
This standard defines the Designated Record Set (DRS) used by Texas State University Health Care Components (HCCs). The contents of this standard are additive overlays that incorporate, detail, and extend requirements set by Texas State’s University Policy and Procedure Statements.
This standard applies to all Texas State University HCCs.
-
Definitions
- Terms used in this standard have the meaning ascribed in the Information Security Glossary (see https://infosecurity.txst.edu/work/information-security-glossary.html) and UPPS 01.04.34, HIPAA Program Policy unless otherwise clarified in this section.
- Record: For purpose of this Standard, the term record means any item, collection, or grouping of information that includes PHI and is created, maintained, collected, used, or disseminated by or for a covered entity.
-
Information not in scope of the DRS
The following are not considered part of the TXST DRS:
- Health information generated, collected, or maintained for purposes that do not include decision making about the individual.
- Information compiled in reasonable anticipation of or for use in civil, criminal, or administrative action or proceeding.
- Employer records
- Business associate records that meet the definition of designated record set, but that merely duplicate information maintained by the covered entity
- Source data interpreted or summarized in the individual’s medical record
- Health information in Education Records
-
Designated Record Set
The following records are part of the Designated Record Set.
- Patient Medical Records
- Financial or Billing Records
- Insurance information
- Other records used to make decisions about individuals such as:
- Raw test data from psychological tests, questionnaires
- Authorizations
- E-mail communications
- Photographs
- Data sourced from testing equipment such as:
- Electrocardiogram tracings
- Spirometry readings
- Health information specifically created or maintained by a Business Associate (BA) when acting on behalf of TXST as specified in the BA contract.
- Duplicative information that is also maintained by TXST is not included.
-
Denial of request
Access to the DRS may be denied. Patients do not have access to records if they are being compiled for a civil, criminal, or administrative action.
UPPS 01.04.34 §06.03 provides information on patients’ right to request access to their DRS.
-
Denial of amendment
An individual’s request for amendment may be denied if it is determined the PHI or record that is the subject of the request:
- was not created by the HCC, unless the individual provides a reasonable basis to believe that the originator of protected health information is no longer available to act on the requested amendment;
- is not part of the designated record set; or
- Is accurate and complete.
UPPS 01.04.34 §06.03 provides information on patients’ right to request an amendment.