Policy Title: Patient Lists
Policy Number: PPS-19
Effective Date: April 14, 2003; September 23, 2013
Last Revision: September 1, 2017
Responsible Officer: Executive Vice President, Treasurer and Chief Operating Officer

Table of Contents

• Applicability
• I. Policy
• II. Purpose
• III. Procedure

Applicability

This policy applies to all Covered Entities within Drexel University.

Covered entities are defined in the HIPAA rules as (1) health plans, (2) health care clearinghouses, and (3) health care providers who electronically transmit any health information in connection with transactions for which HHS has adopted standards.

I. Policy

Drexel University (DU) requires that patient lists and protected health information (PHI) be maintained in a confidential and secure manner.

II. Purpose

This Policy informs the DU clinical practices that patient lists required for day-to-day operations must be maintained in a confidential manner and destroyed by shredding when no longer required.

III. Procedure

1. All patient lists produced will include the minimum amount of protected health information needed to accomplish the purpose of the list.
2. Patient sign-in sheets should not include PHI beyond name and should not include demographics or the mention of diagnostic information.
3. Patient lists will be utilized in a confidential manner and destroyed when no longer required.
4. If the list is retained it must be stored in a locked drawer or file cabinet.
5. The locked drawer or file cabinet should be located in a room that is locked after business hours.
6. Production or use of a "patient" list for any purpose other than daily clinical operations must be approved by the Department Administrator prior to production of the list.

 Back to Top