Get started
Insurance privacy and health information
IP-03
Draft

Review disclosures and service providers

How Leela would run itEvent-driven · before a new disclosure and during risk-based reviews
Proposed steps
The requirement
Confirm the permitted disclosure basis and any authorization or choice required. Review recipient restrictions, contracts, access and retention; correct unauthorized uses promptly.
Before this work
Contracts, sharing records and recorded permissions An approved disclosure matrix and privacy reviewer
Applies
Tell Leela about your company to see whether this applies.
Status
Setup needed

Tell Leela how you handle it today, or hand it over: see what’s next.

How Leela would run it · proposed steps
  1. Leela
    Compare proposed sharing and recipient terms with the approved permissions and restriction matrix.
    Proposed step
  2. Leela
    Prepare authorization gaps and access or retention findings for review and track corrections.
    Proposed step
  3. Privacy officer
    A privacy or legal specialist determines the permitted disclosure basis and approves sensitive sharing decisions.
    Your team decides
What Leela keepsThe evidence this obligation leaves, as the work happens
Listed from the policy library
Contents
  1. 01
    Disclosure review and provider restrictions
    Controlled record with date, owner, source and review history
Evidence
Disclosure review and provider restrictions
Insurance privacy and health information §3.3
1
of 1 record

The steps are the library’s proposed workflow for this obligation: a description of the work, not a run. The records are its evidence in the library.

What’s next?