Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Service Delivery topic
No spam. Unsubscribe anytime.
DSPD: supports must follow ISO process; unauthorized sharing could violate HIPAA
Summary
DSPD staff said state support coordinators issue ISOs and families choose providers; arranging services outside the ISO process or sharing protected information can violate choice and HIPAA and should be reported to OSR, constituent services (dspd@utah.gov) or the privacy officer (tdblack@utah.gov).
A provider asked whether established companies are being prioritized by support coordinators and whether coordinators sometimes share personal email correspondence with preferred providers. Marcy (DSPD) said DSPD employees send out the Individual Service Options (ISOs) to providers and "when someone is in services, the responses are then sent to the person or their family or their guardian and the support coordinator, and families then choose who they're gonna interview." She added that if a support coordinator arranges options outside the ISO process, "that would be a violation of the person's choice" and should be reported to OSR or constituent services.
On privacy and improper sharing of protected information, Marcy warned that sharing personal or protected health information with unauthorized parties "could be violating HIPAA rules." She provided the privacy officer's contact for reports: Tyler Black, tdblack@utah.gov, and asked providers to report concerns so the department can investigate and enforce contract compliance when appropriate.
Why this matters: providers raised concerns about fair access to referrals and improper information sharing. DSPD staff advised reporting suspected violations to contract oversight offices and the privacy officer so the department can investigate and remedy noncompliance.
