An external coding audit vendor requests copies of inpatient records. How should HIM handle the disclosure?
Select an answer to reveal the explanation.
Short Explanation
Auditors do not get a free-for-all dump of charts. Release of information still runs through HIPAA lanes—BAAs, minimum necessary, approved processes. Help the audit, but do not freestyle the disclosure.
Full Explanation
Disclosures of PHI to coding audit vendors generally occur under business associate arrangements and other HIPAA-permitted pathways with minimum-necessary limits. HIM should use established release-of-information procedures rather than ad hoc unrestricted emailing. Proper agreements and access controls protect patients while enabling legitimate audit activity.