Q: I work for a pharmaceutical company. I am aware of the more obvious identifiers, but are patient diagnoses or ICD-10 codes (without any other identifiers such as dates of birth or Social Security numbers) considered PHI? I have heard arguments on both sides.
Q: When a physician needs to certify an inpatient stay of 20 days or more, do we need to use a specific form for the certification? Or can we submit other documentation such as the physician's notes from the medical record?
