Do we need to add funders to our Release of Information in order for them to conduct audits? Is there language that can be included in our privacy rights and responsibilities document provided to clients who receive our services?

Date Published: October 2014

Print ShareThis


Releases of Information are not required in order for funders to do program monitoring including random client file reviews; however, it is important to state this in your privacy rights and responsibilities materials. For example: “XYZ Agency is required to send reports to funders, but no personal participant information is provided; only numbers in aggregate with other participants and general information about program accomplishments. Program audits involving a sampling of client file review to determine that XYZ Agency is meeting contract requirements may be conducted by various funding agencies such as U.S. Department of Housing & Urban Development (HUD), Department of Health and Human Services (DHHS), and/or State of XXX Public Health Department. Agency auditors and contract monitors are bound by confidentiality requirements.”

Tags: HOPWA Program Requirements - Confidentiality Requirements