Jody Stankiewicz

HCMT1005C001
Week 7 Assignment 2
ROI Policy
XYZ Healthcare
Release of Information (ROI) Policy
One of the many HIM department responsibilities for XYZ Healthcare is to handle
Release of Information (ROI) requests received by the organization. We must
always make sure that security and privacy is our top priority when handling and
processing these requests. With that in mind please review the material below.
Steps in handling/processing ROI
1) Enter the request into the ROI database making sure to include all of the
following information:
a. Name of person making the request (if different than the patient)
b. Requester Address
c. Requester Telephone
d. Reason/Purpose for Request
e. Patient Name
f. Patient DOB
g. Patient Address
h. Patient Telephone
i. Patient Health Record Number
j. WHAT IS THE SPECIFIC HEALTH RECORD REQUEST*
*For privacy and security reasons-ONLY the specific information that is
requested is to be released
2) Verify the Patients Identity:
a. Is/was the patient a patient at XYX Healthcare
b. Using the information provided above in number 1-compare patient
identity; in addition you may use a social security number to verify.
c. Compare signatures on file. Do they match?*
*Keep in mind that ROI requests that come through the patient portal might not
have an actual signature and some verification has taken place just by receiving the
request via the Patient Portal. However, you are still REQUIRED to verify patient
identity.
3) Determine if it is a Valid ROI Request:
a. Check for completed authorization forms that have been signed by the
patient.
b. Do the authorization forms on file cover the current ROI request?
c. If the ROI request is by someone other than the patient- does that person
have authorization to obtain the requested information?
d. IF YOU DO NOT HAVE AUTHORIZATION FORMS ON FILE OR YOU HAVE
ANSWERED NO TO b. or c. STOP! THE ROI REQUEST IS INVALID
AND MUST BE RETURNED TO THE REQUESTER WITH AN
EXPLANATION.

Jody Stankiewicz
HCMT1005C001
Week 7 Assignment 2
ROI Policy

Move on to the final step ONLY after Steps 1 through 3 are

complete, verified and deemed Valid!
4) Process the request: Release ONLY the information that has been
requested and nothing more.
5) Mark the ROI Request as Complete; sign and date.
Turn Around Time and Monitoring

ROI Requests will be handled in the order of which they are received EXCEPT
in the case of requests pertaining to Continuity of Care. Continuity of Care
requests take priority over all other ROI Requests.

HIM Management has determined that staff can currently respond and
process all valid ROI Requests within 1-2 business days. We will continue to
monitor this process and will make adjustments accordingly.