OrHIMA | Virtual Release of Information (ROI) Workshop – January 14, 2026
Live & Recorded Virtual Event
Overview
Julia Huddleston, CIPP/US, CIPM, CCSFP, C|CISO Associate – Principal, Apgar and Associates
- HIPAA Privacy Rule Review
- TPO and Continuity of Care – what does not require an authorization and what does
- HIPAA and Oregon Law
- Other Laws – 42 CFR Part 2, FERPA, Psychotherapy Notes, Oregon Statute
- ROI specifics: Timeframes, Charging for Records, Record Retention and ROI
- Deidentification of PHI
1.0 – Information Protection: Access, Disclosure, Archival, Privacy, and Security
Aurae Beidler, DHSc, MHA, RHIA, CHC, CHPS, FAHIMA – Program Director, Assistant Professor
- Accounting of Disclosure, Access, Amendment, Restriction, etc.
- Anatomy of an Authorization and Patient Access Form – requirements of a valid form
- Personal Representatives and ROI
- Legal Documents (Guardianship, POA, Advanced Directives, etc.)
- Minors, Decedents, Estates
- Denial of Access (Clinical Judgment, How to deny/ what to send the requestor)
1.0 – Information Protection: Access, Disclosure, Archival, Privacy, and Security
Cindy Hahn – Senior Assistant County Attorney and Chief Privacy Officer, Office of the Multnomah County Attorney
- Consent to Treatment
- Parental Rights to Access Information about Minor Children
- Parents who Disagree about Minor Children’s Treatment and Access to Information
- Special Rules Regarding Mental Health Records and Co-Occurring Disorders (e.g., Substance Use Disorder)
1.0 – Information Protection: Access, Disclosure, Archival, Privacy, and Security
Moderator: Mark Bonanno
Aurae Beidler, Julia Huddleston, Mari Stout, Cindy Hahn
- AI Risks and Impact on ROI
- State privacy laws
- Attorney requests
- Other topics (as time permits)
1.0 – Information Protection: Access, Disclosure, Archival, Privacy, and Security
Mari K. Stout, MHSA, FACHE, CHC, CHPC, CCEP – Mari K Stout Consulting
- Identify when (and to whom) “Part 2” applies and distinguish between HIPAA and Part 2 requirements
- Elements of a valid consent for Part 2 records and new notice requirements
- Understand the new TPO consent option and common disclosures that it can cover
- Implement the “copy of or scope of the consent will travel” requirementin daily workflows, including electronic and paper processes
- Recognize high-risk scenarios that could result in Part 2 violations and penalties under the new enforcement structure
- Apply appropriate consent requirements for different disclosure types (TPO vs legal proceeding vs. SUD counseling notes)
1.0 – Information Protection: Access, Disclosure, Archival, Privacy, and Security
Course Info
Published Date
January 2026
Total CEs
5.0
Domain(s)
Information Protection: Access, Disclosure, Archival, Privacy and Security
Pricing
OrHIMA Member
$80
Non-Member
$105
Student
$20
OrHIMA Member – an AHIMA dues-paying member who has selected Oregon as their Component Association (CA)
Non-Member – includes AHIMA dues-paying members from other AHIMA Component Associations (CA) as well as AHIMA Credentialed Non-Members
Learn More
Speakers
Additional Information
AHIMA
This educational offering has been approved for continuing education credit for use in fulfilling the continued education requirements of the American Health Information Management Association (AHIMA).
AAPC
CEUs are accepted from programs sponsored by AHIMA national offices and the state or regional AHIMA branches. One hour of instruction is worth one CEU. A certificate of attendance or completion is necessary to show participation.
ACDIS
AHIMA CEUs that are CDI-related are accepted.
Register
In order to access this course, you will need to click on the button labeled “Register for this Course.“
Already Purchased Course?
If you have already purchased this course, then you will need to sign in to access and then click on the session(s) listed under Course Content.
Access instructions for the course will be emailed to you within 2 business days following receipt of payment.
You will have 60 days to access the course after access has been granted.
How Do I Receive the CE?
You must click on the button labeled “Mark Complete” at the bottom of each course page before the CE will appear on the My Certificates page.
- For on-demand events, access instructions for the course will be emailed to you within 2 business days following receipt of payment.
- You will have 60 days to access the course. If your course has expired, and you need an extension, please contact us.
- You must click on the button labeled “Mark Complete” at the bottom of each course page before the CE will appear on the My Certificates page.
View more FAQs.
Need assistance? Contact us!
Course Content





