Questions tagged [hipaa]

The Health Insurance Portability and Accountability Act of 1996 is a United States statute that mandates privacy and security protocols for personal medical information.

Filter by
Sorted by
Tagged with
0 votes
1 answer

HIPAA release form for travel insurance

This is all USA related. I'm filing a claim to cover my medical expenses that happened on a trip abroad. Some related expenses happened in the US after I got back. The insurance company sent me an &...
toderik's user avatar
  • 103
0 votes
0 answers

TEFCA: Do providers have to give individuals fast electronic access to their health data?

TEFCA creates a network of providers who service health information requests. The Sequoia Project's documentation on required flow-down provisions asserts: "Participants and Subparticipants may ...
Zekka Nelson's user avatar
0 votes
0 answers

When referring to HIPAA legislation, would the 2013 Omnibus rule be considered all inclusive or refer only to the additions in the Omnibus rule?

When referring to the HIPAA 2013 Omnibus rule, should this be read as HIPPA all-inclusive, from inception; up-to and including the changes introduced in the 2013 Omnibus rule or should this be read as ...
Doug Kimzey's user avatar
2 votes
1 answer

Recording patients in a Physical Therapy Clinic

Consider a hypothetical physical therapy clinic in California. It is my understanding that it would be against the laws of the clinic to video tape the patients without their knowledge. Please ...
Bob's user avatar
  • 1,163
0 votes
1 answer

Are complaints to hospital administration PHI under HIPAA's Privacy Rule

Paul has heart surgery. While he's recovering, staff is constantly distracted by their phones and fails to check in on him at required intervals, administer medication on time, and provide medically ...
bdb484's user avatar
  • 58.3k
-1 votes
1 answer

Is a provider's collecting your PHI and then cancelling your appointment a HIPAA violation?

Suppose someone arrives on time for an appointment, fills out all of the new patient paperwork, supplies a photo of their ID and insurance and is then told by the provider after handing in the ...
guero64's user avatar
  • 561
6 votes
1 answer

Does HIPAA protect against doctors giving prescriptions to pharmacists that you didn't approve?

My doctor sent a prescription to a pharmacist his clinic had a relationship with. I didn't approve this transaction. Is it legal for him to share my prescription with a pharmacist I didn't approve? I ...
Evan Carroll's user avatar
  • 2,141
1 vote
1 answer

Authorizing Assistants for Medical Work

I have an assistant who handles nearly all scheduling and administration for me, personal and work. We sometimes run into trouble when a new medical/dental office says, "I'm sorry, I can't talk ...
user46114's user avatar
3 votes
1 answer

What is the most comparable American law to GDPR right to subject access? Privacy Act?

HIPAA seems comparable but only applies to medical data, but is there anything more general than that? How does privacy act compare to data subject access rights under gdpr? Is it that it only applies ...
JosephCorrectEnglishPronouns's user avatar
3 votes
1 answer

What does HIPAA say about a third party reviewing protected health information and related records?

Suppose that in a US county the County Board of Commissioners wants to engage a retired physician to look into the county ambulance dispatch system to see what it takes to create proper records and ...
Steve Foutz's user avatar
3 votes
2 answers

Is self-reported wellness covered by HIPPA?

Suppose that a developer creates a website where people can enter daily information on how they feel (energy, back pain, mood, etc.). A person's information would be available to his or her ...
Dan R.'s user avatar
  • 159
1 vote
1 answer

Is an official patient/physician relationship required for HIPAA to apply?

Inspired by a tweet I saw a moment ago: She's a nurse and not only do I know that her sister in law N**** is coming in from out of town, she ...
Nzall's user avatar
  • 1,197
23 votes
5 answers

If a minor requested a doctor prescribe her birth control, can she demand the doctor not disclose her request to her parents?

Let's say a 16 year old girl manages to speak to her doctor in private during a regular appointment and requests birth control. She is afraid her parents would respond poorly to knowing she is ...
dsollen's user avatar
  • 8,400
1 vote
1 answer

Qualifying Life Event changes in Employer Sponsored Health Insurance

Is my understanding correct that HIPAA in the US defines the concept of Qualifying Life Events as a means to ensure employer sponsored health programs provide a Special Enrollment Period upon being ...
maple_shaft's user avatar
-1 votes
1 answer

Does HIPAA apply to telecom equipment vendors or telecom services?

Some time ago, while filling a prescription at a pharmacy in a chain store, I was asked if I wanted to receive text messages when my medication would be ready. I agreed. Now, whenever my order is ...
grovkin's user avatar
  • 2,530
8 votes
1 answer

Does HIPAA apply to individuals?

Does HIPAA privacy protection apply to an individual who has no relation to the healthcare field? For example, my neighbor drops his prescription pill bottle on the sidewalk outside his house. I pick ...
Kevin's user avatar
  • 231
3 votes
1 answer

Decrypt information for internal technical purposes in a HIPAA compliant way

Consider a scenario where a company operates a service which is HIPAA compliant. This service requires storing patient emails which may contain personally identifiable information (PII). This PII is ...
Uri's user avatar
  • 131
0 votes
1 answer

What are a business's obligations now that the Biden (OSHA) administration has suspended enforcement of its business vaccination mandate(s)?

The Biden administration has suspended enforcement of its vaccination and testing requirements for private businesses after a federal appeals court halted the rules pending review. The Occupational ...
KingsInnerSoul's user avatar
3 votes
1 answer

Do parents have access to an adult child's childhood medical records

After my child turns 18, I know I am blocked from seeing any new medical records, unless they give explicit permission. However, does that mean I am blocked from their pediatric medical records? ...
Scott Carlson's user avatar
3 votes
1 answer

Is it a HIPAA violation to use a personal email to set up a medical billing account at work?

This question from the workplace stackexchange asks: I recently resigned from my job ... in NY ... Now I am being asked to tell them all my usernames and passwords for websites I used for my job as a ...
BobRodes's user avatar
  • 133
2 votes
2 answers

Can an employer ask an employee about personal health matters (HIPAA) and COBRA decision in public?

Hypothetical Scenario (in the US): Susan's employer, MoneySavers, offers COBRA to employees who separate from the company. Susan has given her two weeks' notice (she has quit her job) and will soon ...
ninja star's user avatar
1 vote
1 answer

Do NYS healthcare providers have a legal time limit to get your medical test results to you?

United States (New York state) here. My wife got some bloodwork done at her doctor's office a few weeks ago, and she confirmed last Monday (2/2/21) with their office that the results were back, but ...
hotmeatballsoup's user avatar
1 vote
1 answer

Hipaa - doctor shared my medical information with everyone at religious facility

I went to the emergency room in March thinking I had Covid-19 and since I am young and healthy the doctors labeled me as having a panic attack and assumed I was on something and so they drew blood for ...
Rami's user avatar
  • 119
1 vote
0 answers

Does a foreign company need to be HIPAA compliant to work with a covered entity?

If I'm a HIPAA covered entity and I want to work with a foreign company (e.g. the foreign company would provide the covered entity with PHI from US and other people), does that foreign company also ...
user113589's user avatar
2 votes
1 answer

Are healthcare service employees required to notify anybody (in general or particular) of a HIPAA violation?

I was notified by one of our patients that they received a "Summary of Today's Visit" in the mail, however, it wasn't their own "Summary of Today's Visit", it was that of another patient. Knowing ...
Sheri Clark's user avatar
1 vote
1 answer

Does PHI need to contain health information PLUS one of the 18 identifiers?

I've worked for various healthcare companies and found there's a wide range of interpretation to what protected HIPAA data is. It should be more cut and dry, but in actual practice it seems to be a ...
user avatar
0 votes
2 answers

Are documents generated by the patient part of psychotherapy notes under HIPAA?

HIPAA defines psychotherapy notes as follows (emphasis added): Psychotherapy notes means notes recorded (in any medium) by a health care provider who is a mental health professional documenting or ...
Mowgli's user avatar
  • 506
2 votes
2 answers

Is it a violation of HIPAA to say that a baby was born?

If a medical worker tells someone the first name of a child born at a hospital on that day, is that a violation of the Health Insurance Portability and Accountability Act (HIPAA) ? Does it make a ...
Skittles'MnM's user avatar
1 vote
1 answer

HIPAA user names and emails in logs

We are developing software and interested in the following matter: Is having email addresses and usernames of our users in file logs a HIPAA violation or not? NOTE: 1. We are not going to store ...
Sergii Zhuravskyi's user avatar
2 votes
1 answer

Is it a HIPAA violation for a dentist office to print a patient's password on paperwork?

Dentist office just printed my password (to their portal) on their paperwork. Surely this is a HIPAA violation (or against best practices, HIPAA or otherwise). Can anyone confirm if so and point me ...
cf512's user avatar
  • 21
0 votes
1 answer

United States HIPAA and New Zealand HISO from outside these countries

We are developing a software product for storing and managing health records in Australia, with the software product primarily targeted towards Australian healthcare organisations. This requires us to ...
AdrianGW's user avatar
2 votes
1 answer

Concealing Medical Conditions from Employer

If an employer asks an employee or prospective employee to fill out and sign a health declaration form (very common in the medical field) like this. If the employee is afraid that revealing their ...
LN6595's user avatar
  • 143
1 vote
1 answer

Is personal check data PHI if used to pay a covered entity?

Is the information on a personal check such as a name, address and phone number considered personally identifiable health information or PHI if paid to a covered entity?
user avatar
1 vote
2 answers

My rights as a Patient [duplicate]

Hello: I have never had an issue with obtaining any test result from any lab or imaging facility until now. My doctor ordered x-rays to be taken in his office on 1/24/19. The only appointment ...
Ida Czap's user avatar
1 vote
1 answer

Insurance Company sending possible PHI to the wrong mailing address

I'm wondering if sending snail mail to the wrong address could ever be a violation of HIPAA? Obviously, due to people moving and not updating their account information, this likely happens all the ...
NSjonas's user avatar
  • 113
0 votes
1 answer

Licensing - can any intangible thing of value to which an individual holds exclusive rights be licensed?

Provided an intangible thing is of value and an individual holds the exclusive rights to that thing of value, is there any limitation to what can and cannot be licensed? Can an individual license ...
faustus's user avatar
  • 153
3 votes
1 answer

Do the HIPAA regulations in the United States prevent medical providers from disclosing relevant health information on patient A to patient B?

If a medical provider is aware of some health information on patient A that can affect patient B, do the HIPAA regulations still prevent the medical provider from conveying that information to patient ...
Franck Dernoncourt's user avatar
1 vote
1 answer

Does HiPAA allow for the use of cloud services to store encrypted backups?

Considering a service allows for the communication of PHI without persistent storage. If the user takes responsibility for storing their own data, and they choose to store it in their google cloud ...
xerotolerant's user avatar
1 vote
2 answers

Why aren't post-mortem records protected by HIPAA?

Looking at the question Why are toxicology reports made public? and the answer provided, I have to wonder why aren't such records (autopsy results, toxicology reports, etc.) covered by HIPAA? ...
Cos Callis's user avatar
1 vote
1 answer

Allergies, Sudafed, HIPAA, a prescription, and the logbook/databse

A few years ago I learned about the Sudafed logbook-that-is-implemented-as-a-database. I had to do my own research about it because the person at the Walmart pharmacy didn't know anything and ...
ihuQIE5Yx6M3icbS1r9P9UxI's user avatar
3 votes
2 answers

Does HIPAA prevent doctors from sharing statistics?

In the US, where HIPAA prevents doctors from disclosing patient information, can a doctor disclose information about his patients in general, since he's not disclosing information about any specific ...
DonielF's user avatar
  • 383
2 votes
1 answer

Does HIPAA apply to independent doctor with no links to Medicare or other medical organization?

When I spoke with my family doctor he was under the impression that HIPAA privacy rules applied to EVERY doctor or health care provider. Also a professor who teaches classes for emergency medical ...
D_Bester's user avatar
  • 123
41 votes
2 answers

How is it legal for a hospital to put two patients together in the same room in the US?

In the United States we have HIPAA regulations in place to (among other things) prevent healthcare providers, insurance providers, and any other entity that handles medical information from leaking ...
Adam Plocher's user avatar
2 votes
1 answer

Picture of a receipt from a Doctor

I had to go several rounds with a doctor's office about them not taking my insurance and them assuring me that the copay would be a certain amount. They then charged me 20x the quoted amount. I didn't ...
ford prefect's user avatar
4 votes
1 answer

For HIPAA, Does US Patient Data Have To Stay On US Servers?

For an application that stores US patient data, does HIPAA require that US data stays on US servers?
Ben Rei's user avatar
  • 41
1 vote
1 answer

Can a software contractor be indemnified against HIPAA?

I'm an independent developer. My client's app manages PHI for US based patient, which means HIPAA rules apply. From what I understand, HIPAA sees my client's company is the covered entity, and I am a ...
andyhasit's user avatar
  • 121
1 vote
0 answers

Does the 2013 HIPAA Omnibus apply to employees of subcontractors?

From the 2013 HIPAA Omnibus: that a business associate includes a “subcontractor that creates, receives, maintains, or transmits protected health information on behalf of the business associate.” .....
Matthew Cline's user avatar
2 votes
1 answer

HIPAA within context of marriage

I am finding out that my ex-wife may have kept from me a genetic predisposition to Down syndrome and other abnormalities in the baby. The physician did not tell me about this either. I want to know ...
maverick's user avatar
  • 111
4 votes
1 answer

Does HIPAA require a secondary physician to share results with your primary?

NY state here. If I go to get a second opinion from a physician other than my primary, are there any regulations (HIPAA or otherwise) that require that 2nd physician to share consultation notes/lab ...
smeeb's user avatar
  • 377