Are University employees required to verify a person’s identity prior to releasing Protected Health Information to them?

Yes. Prior to making a disclosure or processing a patient request involving PHI, University Personnel must verify the identity of the person requesting the PHI and the authority of any such person to have access to PHI, if the identity of the person is not known to University Personnel.

Verification of identity may be accomplished by:

(1) presentation of picture I.D.

(2) signature comparison

or

(3) other appropriate method.
A copy of the documentation used to verify the identity or authority must be maintained.