Page 714

714 Chapter 3:Processes and procedures • Section 5: Program integrity (07/2026) Note: You may conduct business while maintaining participant confidentiality. Relevant information may be shared without identifying the specific individual. For example, “I am working with a woman in her late 80’s who was recently diagnosed with terminal cancer. She needs the following type of care. . .”. However, if it becomes necessary to identify the participant by name or to provide enough specifically identifying information so that the participant will become known even if the individual’s name is not revealed, obtain the participant’s permission to disclose the necessary and relevant information. If verification is needed to ensure compliance with JOBS program activities, click here for Working with families. Revocations or cancellations of authorizations A valid revocation should be treated similarly to the situation of an individual who refuses to sign an authorization. A revocation about substance use information may be made orally. For all other information, the request must be in writing. The method and date of the cancellation should be written on the authorization form; the current date should be added if different from the cancellation date. An ODHS|OHA staff member should initial the cancellation entry and scan the authorization form into EDMS or ONE. Requests to restrict use or disclosure of individual information An individual has the right to request a restriction on use or disclosure of their information. The Request for Restriction and Use of Disclosures (MSC 2095) is used for this purpose. ODHS|OHA is not obligated to agree to a restriction and may deny a request for restriction, or ODHS|OHA may agree to a restriction more limited than what the individual requested. (Exception: Certain programs can only use information that is authorized by the individual, such as alcohol and drug programs or vocational rehabilitation participants). When approving an individual’s request for restriction on use and disclosure of their information, caution should be used; there must be adequate safeguards provided to the information in question. If safeguards cannot be provided, the request must be denied. When denying a request, the bottom portion of the MSC 2095 is completed. Certain information, such as substance use or mental health information may only be used and disclosed as authorized by the individual. This means if the individual has asked for disclosure of this type of information to be restricted to a particular entity or person, ODHS|OHA may not deny the restriction and instead must abide by that restriction. Further disclosure (re-disclosure) of information Further disclosure is any use or disclosure of information obtained under an information form: • With any program in ODHS|OHA or entity outside of ODHS|OHA not listed on the authorization form, or • For any purpose not listed on the authorization form. Information received by ODHS|OHA that is otherwise confidential or privileged under state or federal law may not be further disclosed to another person or entity unless the individual provides written authorization for disclosure of that information or another exception applies. This requirement means that, prior to further disclosure of information, the applicant or individual must first fill out, sign and date an Authorization for Disclosure, Sharing and Use of Individual Information (MSC 3010) form for that disclosure. For example, ODHS|OHA often obtains copies of an individual’s medical records in connection with an eligibility determination or abuse investigation. These medical records obtained from a third party are exempt from redisclosure unless an additional release is obtained.