Susan Blair, MSJ, MBA, privacy officer at the University of Florida at Gainesville, shares how UF has set boundaries on how optometrists working at the university can communicate with patients over the Internet. First, for provider-to-patient e-mail messaging, the UF provider must give the patient cautionary information about e-mail security. Then the provider must obtain a signed patient Authorization for E-Mail Correspondence
e-mail authorization:
Patient name ____________________________________
Date of birth________________
Medical record number________________________
Verification of identity (photo ID, if patient is unknown)_______ Social Security no._________________
*Complete the following only if the person completing the authorization is not the patient:
Name of representative____________________________
Relationship to patient____________________________
Legal authority _________________________________
Verification of identity____________________________
Verification of authority____________________________
By signing this form, I authorize: (Person, class of persons, or organization)___________to communicate by electronic mail (e-mail) with me and with other healthcare providers as necessary for my/the patient's medical care and treatment.
I agree that e-mail messages may include protected health information about me/the patient, whenever necessary.
I understand that, by federal law, (Your Organization) may not use or disclose my health information, except as provided in (Your Organization) Notice of Privacy Practices, without my authorization. My signature on this Authorization indicates that I am giving permission for the uses and disclosures of the protected health information described above. I hereby release (Your Organization) and its employees from any and all liability that may arise from the release of information as I have directed.
I understand that I have the right to revoke this Authorization at any time. If I want to revoke this Authorization, I must do so in writing, and address it to the person or institution named above.
I understand that if I revoke this Authorization, it will not apply to any information already released as a result of this Authorization.
I understand that I may refuse to sign this Authorization. I also understand that the institutions or individuals named above cannot deny or refuse to provide treatment, payment, or enrollment in a health plan or eligibility for benefits if I refuse to sign this Authorization.
I understand that, once information is disclosed pursuant to this Authorization, it is possible that it will no longer be protected by the federal medical privacy law and could be disclosed by the person or agency that receives it.
This Authorization expires automatically on (date or event)____________________________
I have read and understand the information in this authorization form.
Signature of patient or legal representative: ________________________________________________
Please print name: _________________________________
Date:____________________________________
- Source: Reprinted with permission of Susan A. Blair, MSJ, MBA, privacy officer, office of vice president for health affairs, University of Florida, Gainesville.