| (a) Before sharing a consumer's information, OO staff
confirm the identity of the individual receiving the information.
(b) If a person other than a consumer or the consumer's
LAR contacts OO staff, including a health care provider, the person
is told OO staff can take information from them but that OO staff
must have permission from either the consumer or the consumer's LAR
before OO staff can share information about their HHSC case.
(c) OO staff obtain a consumer's consent before sharing
the consumer's information with anyone other than HHS staff involved
in the review of the contact. Consent can be obtained from the consumer's
LAR.
(d) OO staff follow HHSC's policies relating to transmission
of consumer data, including use of secure email to encrypt messages
that contains a consumer's confidential information or protected health
information. OO staff can transmit data in a non-secure format if
the consumer or the consumer's LAR consents in writing.
|
