Yes. Prior to making a disclosure or processing a patient request involving PHI, University Personnel must verify the identity of the person requesting the PHI and the authority of any such person to have access to PHI, if the identity of the person is not known to University Personnel.
Verification of identity may be accomplished by:
(1) presentation of picture I.D.
(2) signature comparison
(3) other appropriate method.
A copy of the documentation used to verify the identity or authority must be maintained.