How to obtain sharing consent from a patient?

If a patient has already registered with the Electronic Health Record Sharing System (eHealth) but has not given his / her sharing consent to an healthcare provider (HCP), the HCP only needs to perform ANY of the following procedures to access his / her electronic health record (eHR) –

Ask the patient to insert his / her Hong Kong identity card (HKIC) to the HKIC reader

Enter the patient's 8-digit access key to eHealth

Obtain the patient's signed sharing consent form

Ask the patient to call the 24-hour Interactive Voice Response System ((852) 3467 6300) to give sharing consent

• What should I do if I have to access the eHRs of my patient which are under restricted control? Will my patient be notified when I have accessed these records?

  Expand

  If the patient is aged 16 or above and is capable of giving consent, you should:

  1. explain the reason(s) of access to the patient and obtain his / her additional consent¹ before accessing these records;
  2. ask the patient to authorise the access¹ by inserting his / her Smart HKIC into the HKIC reader or inputting the system-generated One-Time Password sent to the patient;
  3. select the data type(s) that you would like to access and input the reason(s) for access in the system.

  If the patient is under the age of 16, or is aged 16 or above but incapable of giving consent, you should:

  1. explain the reason(s) of access to the Substitute Decision Maker (SDM) of the patient and obtain the SDM's additional consent¹ before accessing these records;
  2. ask the SDM to authorise the access¹ by inputting the system-generated One-Time Password sent to the SDM;
  3. select the data type(s) that you would like to access and input the reason(s) for such access in the system.

  The patient or his / her SDM will receive a notification via the selected communication means when the patient's eHRs have been accessed. If accesses have been made to eHRs that are under restricted control by community-based healthcare professionals, the patient or his / her SDM will receive an additional notification through the selected communication means.

  ¹ Applicable to accesses by healthcare professionals in the community only
• Is there a better way to provide training to our staff at clinics in carrying out "identity verification" and "Sharing Consent" related procedures for patients and provide them with clearer concepts on "Indefinite" and "One Year" sharing consent?

  Expand

  eHealth users of healthcare provider can log in the system and view the training material for essential functions of the system e.g. how to verify patient’s identity and give sharing consent in eHealth.