Can I collect health information from participants in Oklahoma? What are the requirements?

To collect health information from participants in Oklahoma, you must comply with the following requirements:

Requirements for Collecting Health Information in Oklahoma

1. Authorization Form: The State Board of Health has adopted and distributed a standard authorization form and accompanying instructions for use in obtaining authorization for the exchange of health information. A health care entity shall accept the authorization form adopted and distributed by the State Board of Health as a valid authorization for the exchange of health information ^[2.1][2.3].
2. Disclosure Statement: If you are a health care provider, you must provide a disclosure statement to inform patients and their families of their rights under the Hydration and Nutrition for Incompetent Patients Act, the Nondiscrimination in Treatment Act, the Oklahoma Advance Directive Act, and the Oklahoma Do-Not-Resuscitate Act ^[4.1].
3. Authorization Required: A licensee shall not disclose nonpublic personal health information about a consumer or customer unless an authorization is obtained from the consumer or customer whose nonpublic personal health information is sought to be disclosed ^[3.1].
4. Confidentiality: All information collected from any source will remain confidential and will not be public records as defined in the Open Records Act except as provided in 63 O.S. 1998 Supp. Section 1-119. Under no circumstances shall the information in the database or any records from which this database is maintained be used for any purpose other than the compilation of aggregate data or the creation of anonymous medical case histories for statistical reporting and data analysis ^[5.1].

Therefore, to collect health information from participants in Oklahoma, you must obtain authorization using the standard authorization form adopted and distributed by the State Board of Health, provide a disclosure statement, ensure that authorization is obtained from the consumer or customer whose nonpublic personal health information is sought to be disclosed, and maintain confidentiality of the information collected.

Source(s):

• [2.1] Standard Authorization Form for Exchange of Health Information
• [3.1] When authorization required for disclosure of nonpublic personal health information
• [4.1] Disclosure Statement Informing Patients and Families of Rights Under Health Care Acts
• [5.1] Confidentiality
• [2.3] Acceptance and Use of Form

Jurisdiction

Oklahoma

• Privacy