Questions tagged [hipaa]

The Health Insurance Portability and Accountability Act of 1996 is a United States statute that mandates privacy and security protocols for personal medical information.

Filter by
Sorted by
Tagged with
1
vote
1answer
106 views

Is it a violation of HIPAA to say that a baby was born?

If a medical worker tells someone the first name of a child born at a hospital on that day, is that a violation of the Health Insurance Portability and Accountability Act (HIPAA) ? Does it make a ...
0
votes
1answer
47 views

Does PHI need to contain health information PLUS one of the 18 identifiers?

I've worked for various healthcare companies and found there's a wide range of interpretation to what protected HIPAA data is. It should be more cut and dry, but in actual practice it seems to be a ...
0
votes
2answers
40 views

Are documents generated by the patient part of psychotherapy notes under HIPAA?

HIPAA defines psychotherapy notes as follows (emphasis added): Psychotherapy notes means notes recorded (in any medium) by a health care provider who is a mental health professional documenting or ...
0
votes
1answer
49 views

HIPAA user names and emails in logs

We are developing software and interested in the following matter: Is having email addresses and usernames of our users in file logs a HIPAA violation or not? NOTE: 1. We are not going to store ...
2
votes
1answer
92 views

Is it a HIPAA violation for a dentist office to print a patient's password on paperwork?

Dentist office just printed my password (to their portal) on their paperwork. Surely this is a HIPAA violation (or against best practices, HIPAA or otherwise). Can anyone confirm if so and point me ...
2
votes
1answer
67 views

Concealing Medical Conditions from Employer

If an employer asks an employee or prospective employee to fill out and sign a health declaration form (very common in the medical field) like this. If the employee is afraid that revealing their ...
1
vote
1answer
122 views

Is personal check data PHI if used to pay a covered entity?

Is the information on a personal check such as a name, address and phone number considered personally identifiable health information or PHI if paid to a covered entity?
1
vote
2answers
207 views

My rights as a Patient [duplicate]

Hello: I have never had an issue with obtaining any test result from any lab or imaging facility until now. My doctor ordered x-rays to be taken in his office on 1/24/19. The only appointment ...
1
vote
1answer
269 views

Insurance Company sending possible PHI to the wrong mailing address

I'm wondering if sending snail mail to the wrong address could ever be a violation of HIPAA? Obviously, due to people moving and not updating their account information, this likely happens all the ...
0
votes
1answer
61 views

Licensing - can any intangible thing of value to which an individual holds exclusive rights be licensed?

Provided an intangible thing is of value and an individual holds the exclusive rights to that thing of value, is there any limitation to what can and cannot be licensed? Can an individual license ...
2
votes
1answer
535 views

Do the HIPAA regulations in the United States prevent medical providers from disclosing relevant health information on patient A to patient B?

If a medical provider is aware of some health information on patient A that can affect patient B, do the HIPAA regulations still prevent the medical provider from conveying that information to patient ...
0
votes
1answer
43 views

Does HiPAA allow for the use of cloud services to store encrypted backups?

Considering a service allows for the communication of PHI without persistent storage. If the user takes responsibility for storing their own data, and they choose to store it in their google cloud ...
1
vote
2answers
799 views

Why aren't post-mortem records protected by HIPAA?

Looking at the question Why are toxicology reports made public? and the answer provided, I have to wonder why aren't such records (autopsy results, toxicology reports, etc.) covered by HIPAA? ...
1
vote
1answer
103 views

Allergies, Sudafed, HIPAA, a prescription, and the logbook/databse

A few years ago I learned about the Sudafed logbook-that-is-implemented-as-a-database. I had to do my own research about it because the person at the Walmart pharmacy didn't know anything and ...
2
votes
2answers
288 views

Does HIPAA prevent doctors from sharing statistics?

In the US, where HIPAA prevents doctors from disclosing patient information, can a doctor disclose information about his patients in general, since he's not disclosing information about any specific ...
2
votes
1answer
226 views

Does HIPAA apply to independent doctor with no links to Medicare or other medical organization?

When I spoke with my family doctor he was under the impression that HIPAA privacy rules applied to EVERY doctor or health care provider. Also a professor who teaches classes for emergency medical ...
38
votes
2answers
13k views

How is it legal for a hospital to put two patients together in the same room in the US?

In the United States we have HIPAA regulations in place to (among other things) prevent healthcare providers, insurance providers, and any other entity that handles medical information from leaking ...
1
vote
1answer
80 views

Picture of a receipt from a Doctor

I had to go several rounds with a doctor's office about them not taking my insurance and them assuring me that the copay would be a certain amount. They then charged me 20x the quoted amount. I didn't ...
4
votes
1answer
147 views

For HIPAA, Does US Patient Data Have To Stay On US Servers?

For an application that stores US patient data, does HIPAA require that US data stays on US servers?
1
vote
1answer
95 views

Can a software contractor be indemnified against HIPAA?

I'm an independent developer. My client's app manages PHI for US based patient, which means HIPAA rules apply. From what I understand, HIPAA sees my client's company is the covered entity, and I am a ...
1
vote
0answers
37 views

Does the 2013 HIPAA Omnibus apply to employees of subcontractors?

From the 2013 HIPAA Omnibus: that a business associate includes a “subcontractor that creates, receives, maintains, or transmits protected health information on behalf of the business associate.” .....
3
votes
1answer
206 views

Does HIPAA require a secondary physician to share results with your primary?

NY state here. If I go to get a second opinion from a physician other than my primary, are there any regulations (HIPAA or otherwise) that require that 2nd physician to share consultation notes/lab ...
2
votes
1answer
118 views

HIPAA within context of marriage

I am finding out that my ex-wife may have kept from me a genetic predisposition to Down syndrome and other abnormalities in the baby. The physician did not tell me about this either. I want to know ...