Under what circumstances can personal health information be used for purposes unrelated to health care?

Can someone please help me by reading my research project on HIPAA for me I just want to know if I did it right or not. These are the things that want me to do.Answers each question in a comlete paragraph that includes an introductory sentence, at least four sentences of explaination, and a concluding sentence. Provides clear organization( for example, uses words like first, however, on the other hand, and so on, consequently, since, next and when) Writes in his or her own words and uses quotation marks to indicate direct qoutations. Supports his oor her opinion by citing specific information from the assigned Web sites and any others references using correct APA or MLA guidlines for citations and references.Here are the questions #1 Does HIPAA affect the patient’s access to his or her medical records? If so, discribe the effect and the procedure for obtaining access. #2 Under what circumstances can personal health information be used for purposes unrelated to health care? #3 Are there requirements for covered entities to have written privacy policies? I f so, what has to be addressed in the policy? This is what I have so far. Will you please write an example for if my is all wrong cause this is my first time doing this so I have no idea at all. Thankyou for your help I really appreaciate it very much.The Health Insurance Portability and Accountability Act of 1996 (HIPAA) The Congress mandated implementation of several federal privacy protections that allows patients to have more control over their health information, put clear lines on the uses and the releasing of specific health records (CDCP 2003). HIPAA do not affect patient’s access to their medical records. The Privacy Rule ensures a national floor of privacy protections for patiens by limiting the ways that health plans, pharmacies, hospitals, and others covered entities can use patients’ personal medical information. Patients generlly should be able to see and obtain copies of their medical records and request corrections if they identify errors and mistakes and so on. Health plans, doctors, hospitals, cclinics, nursing homes, and other covered entities generlly should provides access these records within 30 days on the other hand they may charge patients for the cost of copying and sending the records.(OCR 2003)The Privacy Rule is designed to empower patients by guaranteeing them access to their medical records, giving them more control over how their Protected Health Information (PHI) is used and disclosed, and providing a clear avenue for recourse if their medical privacy is compromised.Since the rule is designed to protect medical records and other personal health information maintained by the certain health care providers,hospitals, health plans, health insurers and health care clearinghouses.(CDCP) The Privacy Rule permits use and desclosure of protected health information, without an individual’s authorization or permission, for 12 natioal priority purposes. These disclosures are permitted, although not required, by the Rule in recognition of the important uses made of health information outside of helath care context. Specific conditions or limitations apply to each public interest need for this information. These are the circumstances personal health information can be used for purposes unrelated to health care. Required by law; Public Health Activities; Victims of Abuse; neglect or Domistic Violence; Health Oversight Activities; Judicial and Administrative Proceedings; Law Enforcement Purposes; Decedents; Cadaveric Organ, Eye, or Tissue Donation; Research,Serious Threat to Health or Safety; Essential Government Functions; Workers Compensation. 9OCR 2003) Yes Covered Entities are required to do alot of things. First they must adopt written Protected Health Information (PHI) privacy procedures, designate a privacy officer their business associates the necessity ti sign agreements respecting the cinfidentially of Protected Health Information (PHI); train all of their employees in privacy rule requirements; however, these entities have to give patients written notice of the covered entities’ privacy pratices and access to their medical records, a chance to limit the use or disclosure of their information, the ability to have an accounting of any use to which the protect health information (PHI) has been put and a chance to request alternative methods of communication information. The Covered Entity’s written privacy procedures must includ safegards for administration of Protected Health Information (PHI), physical security of such information, and electronic and other types of technical security (TWC 2004)