Skip to content
  • About
  • Contact
  • Contribute
  • Book
  • Careers
  • Podcast
  • Recommended
  • Speaking
  • All
  • Physician
  • Practice
  • Policy
  • Finance
  • Conditions
  • .edu
  • Patient
  • Meds
  • Tech
  • Social
  • Video
    • All
    • Physician
    • Practice
    • Policy
    • Finance
    • Conditions
    • .edu
    • Patient
    • Meds
    • Tech
    • Social
    • Video
    • About
    • Contact
    • Contribute
    • Book
    • Careers
    • Podcast
    • Recommended
    • Speaking

The 3 biggest HIPAA myths debunked

Mary Pat Whaley
Physician
July 17, 2013
398 Shares
Share
Tweet
Share

As a healthcare consultant, it is not unusual to be asked about HIPAA regulations on a weekly basis. Three questions come up regularly and seem to cause the most confusion when discussing HIPAA. I call them the Three Big HIPAA Myths – you can’t place medical charts on exam room doors, you can’t use sign-in sheets, and you can’t leave messages on patients’ voice mail or answering machines.

Here, then are the answers, straight from the Office for Civil Rights, which enforces:

  • the HIPAA Privacy Rule, which protects the privacy of individually identifiable health information;
  • the HIPAA Security Rule, which sets national standards for the security of electronic protected health information;
  • the HIPAA Breach Notification Rule, which requires covered entities and business associates to provide notification following a breach of unsecured protected health information;
  • and the confidentiality provisions of the patient safety rule, which protect identifiable information being used to analyze patient safety events and improve patient safety.

Question 1: A clinic customarily places patient charts in the plastic box outside an exam room. It does not want the record left unattended with the patient, and physicians want the record close by for fast review right before they walk into the exam room. Does the HIPAA privacy rule allow the clinic to continue this practice?

Answer:Yes, the privacy rule permits this practice as long as the clinic takes reasonable and appropriate measures to protect the patients privacy. The physician or other health care professionals use the patient charts for treatment purposes. Incidental disclosures to others that might occur as a result of the charts being left in the box are permitted, if the minimum necessary and reasonable safeguards requirements are met.

Examples of measures that could be reasonable and appropriate to safeguard the patient chart in such a situation would be limiting access to certain areas, ensuring that the area is supervised, escorting non-employees in the area, or placing the patient chart in the box with the front cover facing the wall rather than having protected health information about the patient visible to anyone who walks by. Each covered entity must evaluate what measures are reasonable and appropriate in its environment.

Question 2: May physician offices use patient sign-in sheets or call out the names of their patients in their waiting rooms?

Answer: Yes. Covered entities, such as physicians offices, may use patient sign-in sheets or call out patient names in waiting rooms, so long as the information disclosed is appropriately limited. The HIPAA privacy rule explicitly permits the incidental disclosures that may result from this practice, for example, when other patients in a waiting room hear the identity of the person whose name is called, or see other patient names on a sign-in sheet. However, these incidental disclosures are permitted only when the covered entity has implemented reasonable safeguards and the minimum necessary standard, where appropriate. For example, the sign-in sheet may not display medical information that is not necessary for the purpose of signing in (e.g., the medical problem for which the patient is seeing the physician).

Question 3: May physician’s offices or pharmacists leave messages for patients at their homes, either on an answering machine or with a family member, to remind them of appointments or to inform them that a prescription is ready? May providers continue to mail appointment or prescription refill reminders to patients’ homes?

Answer: Yes. The HIPAA privacy rule permits health care providers to communicate with patients regarding their health care. This includes communicating with patients at their homes, whether through the mail or by phone or in some other manner. In addition, the rule does not prohibit covered entities from leaving messages for patients on their answering machines. However, to reasonably safeguard the individuals privacy, covered entities should take care to limit the amount of information disclosed on the answering machine. For example, a covered entity might want to consider leaving only its name and number and other information necessary to confirm an appointment, or ask the individual to call back.

A covered entity also may leave a message with a family member or other person who answers the phone when the patient is not home. The privacy rule permits covered entities to disclose limited information to family members, friends, or other persons regarding an individuals care, even when the individual is not present. However, covered entities should use professional judgment to assure that such disclosures are in the best interest of the individual and limit the information disclosed.

In situations where a patient has requested that the covered entity communicate with him in a confidential manner, such as by alternative means or at an alternative location, the covered entity must accommodate that request, if reasonable. For example, the department considers a request to receive mailings from the covered entity in a closed envelope rather than by postcard to be a reasonable request that should be accommodated. Similarly, a request to receive mail from the covered entity at a post office box rather than at home, or to receive calls at the office rather than at home are also considered to be reasonable requests, absent extenuating circumstances.

Mary Pat Whaley is a physician advocate and consultant who blogs at Manage My Practice.

Prev

Hospice care for the transgendered patient

July 17, 2013 Kevin 16
…
Next

Should a patient's financial concerns influence physician decisions?

July 17, 2013 Kevin 30
…

Tagged as: Primary Care

Post navigation

< Previous Post
Hospice care for the transgendered patient
Next Post >
Should a patient's financial concerns influence physician decisions?

More by Mary Pat Whaley

  • a desk with keyboard and ipad with the kevinmd logo

    What Jay-Z can teach doctors about marketing their practice

    Mary Pat Whaley
  • a desk with keyboard and ipad with the kevinmd logo

    Why patient complaints are an opportunity

    Mary Pat Whaley
  • a desk with keyboard and ipad with the kevinmd logo

    6 reasons why doctors won’t call patients back

    Mary Pat Whaley

More in Physician

  • Revealing America’s expansion: the dark truth of Native American suffering and unjustified abuses

    Anonymous
  • From journalism to medicine: Unveiling the untold stories of patients’ medical conditions

    Veronica Bonales, MD
  • A mentor’s legacy in medicine, leadership, and embracing evidence-based care

    Arthur Lazarus, MD, MBA
  • Breaking free from restrictive covenants to combat burnout

    Raya E. Kheirbek, MD
  • From medical student to intern: Discovering a deeper connection with patients

    Johnathan Yao, MD, MPH
  • A physician’s typical day, as envisioned by a non-clinician health care MBA: a satire

    Jennifer Lycette, MD
  • Most Popular

  • Past Week

    • Is chaos in health care leading us towards socialized medicine? How physician burnout is a catalyst.

      Howard Smith, MD | Physician
    • Boxing legends Tyson and Foreman: powerful lessons for a resilient and evolving health care future

      Harvey Castro, MD, MBA | Physician
    • A physician’s typical day, as envisioned by a non-clinician health care MBA: a satire

      Jennifer Lycette, MD | Physician
    • The rising threat of lung cancer in Asian American female nonsmokers

      Alice S. Y. Lee, MD | Conditions
    • Decoding name displays in health care: Privacy, identification, and compliance unveiled

      Deepak Gupta, MD | Physician
    • From Moscow Mule to the opioid crisis: Unveiling the tragic legacy and urgent solutions

      Osmund Agbo, MD | Meds
  • Past 6 Months

    • “Is your surgeon really skilled? The hidden threat to public safety in medicine.

      Gene Uzawa Dorio, MD | Physician
    • Revolutionize your practice: the value-based care model that reduces physician burnout

      Chandravadan Patel, MD | Physician
    • Breaking the cycle of racism in health care: a call for anti-racist action

      Tomi Mitchell, MD | Policy
    • Unveiling the hidden damage: the secretive world of medical boards

      Alan Lindemann, MD | Physician
    • An inspiring tribute to an exceptional radiologist who made a lasting impact

      Kim Downey, PT | Conditions
    • Proactive risk management: a game-changer in preventing physician burnout

      Howard Smith, MD | Physician
  • Recent Posts

    • A revolution in patient empowerment: Working together to save our medical system [PODCAST]

      The Podcast by KevinMD | Podcast
    • Revealing America’s expansion: the dark truth of Native American suffering and unjustified abuses

      Anonymous | Physician
    • Unlock financial freedom: The physician’s guide to lucrative multifamily syndications and wealth accumulation

      Pranay Parikh, MD | Finance
    • From Moscow Mule to the opioid crisis: Unveiling the tragic legacy and urgent solutions

      Osmund Agbo, MD | Meds
    • From journalism to medicine: Unveiling the untold stories of patients’ medical conditions

      Veronica Bonales, MD | Physician
    • Unlocking resilience: a powerful journey from trauma to transformation [PODCAST]

      The Podcast by KevinMD | Podcast

Subscribe to KevinMD and never miss a story!

Get free updates delivered free to your inbox.


Find jobs at
Careers by KevinMD.com

Search thousands of physician, PA, NP, and CRNA jobs now.

Learn more

View 15 Comments >

Founded in 2004 by Kevin Pho, MD, KevinMD.com is the web’s leading platform where physicians, advanced practitioners, nurses, medical students, and patients share their insight and tell their stories.

Social

  • Like on Facebook
  • Follow on Twitter
  • Connect on Linkedin
  • Subscribe on Youtube
  • Instagram

CME Spotlights

From MedPage Today

Latest News

  • Infant RSV Vax Heads to FDA for Review
  • Is Getting Test Results Online Right Away a Good Idea? Yes, Patients Say
  • Residency Application System Cuts Section on Hobbies and Interests
  • Workplace Harassment, Cyber Incivility High for Minority Groups in Academic Medicine
  • Superior Cognition in the Oldest-Old; Novel MS Pathway; What Links Amyloid and Tau?

Meeting Coverage

  • Phase II Study: Bispecific Oral Drug Tops Leading JAK Inhibitor for RA
  • Closing the Diversity Gaps in Urologic Oncology Leadership
  • Certain NSCLC Patients May Be Able to Stop Immunotherapy at 2 Years
  • No Survival Benefit With Immune Checkpoint Inhibitor Rechallenge in Metastatic RCC
  • Happy Sleep, Happy Couple?
  • Most Popular

  • Past Week

    • Is chaos in health care leading us towards socialized medicine? How physician burnout is a catalyst.

      Howard Smith, MD | Physician
    • Boxing legends Tyson and Foreman: powerful lessons for a resilient and evolving health care future

      Harvey Castro, MD, MBA | Physician
    • A physician’s typical day, as envisioned by a non-clinician health care MBA: a satire

      Jennifer Lycette, MD | Physician
    • The rising threat of lung cancer in Asian American female nonsmokers

      Alice S. Y. Lee, MD | Conditions
    • Decoding name displays in health care: Privacy, identification, and compliance unveiled

      Deepak Gupta, MD | Physician
    • From Moscow Mule to the opioid crisis: Unveiling the tragic legacy and urgent solutions

      Osmund Agbo, MD | Meds
  • Past 6 Months

    • “Is your surgeon really skilled? The hidden threat to public safety in medicine.

      Gene Uzawa Dorio, MD | Physician
    • Revolutionize your practice: the value-based care model that reduces physician burnout

      Chandravadan Patel, MD | Physician
    • Breaking the cycle of racism in health care: a call for anti-racist action

      Tomi Mitchell, MD | Policy
    • Unveiling the hidden damage: the secretive world of medical boards

      Alan Lindemann, MD | Physician
    • An inspiring tribute to an exceptional radiologist who made a lasting impact

      Kim Downey, PT | Conditions
    • Proactive risk management: a game-changer in preventing physician burnout

      Howard Smith, MD | Physician
  • Recent Posts

    • A revolution in patient empowerment: Working together to save our medical system [PODCAST]

      The Podcast by KevinMD | Podcast
    • Revealing America’s expansion: the dark truth of Native American suffering and unjustified abuses

      Anonymous | Physician
    • Unlock financial freedom: The physician’s guide to lucrative multifamily syndications and wealth accumulation

      Pranay Parikh, MD | Finance
    • From Moscow Mule to the opioid crisis: Unveiling the tragic legacy and urgent solutions

      Osmund Agbo, MD | Meds
    • From journalism to medicine: Unveiling the untold stories of patients’ medical conditions

      Veronica Bonales, MD | Physician
    • Unlocking resilience: a powerful journey from trauma to transformation [PODCAST]

      The Podcast by KevinMD | Podcast

MedPage Today Professional

An Everyday Health Property Medpage Today
  • Terms of Use | Disclaimer
  • Privacy Policy
  • DMCA Policy
All Content © KevinMD, LLC
Site by Outthink Group

The 3 biggest HIPAA myths debunked
15 comments

Comments are moderated before they are published. Please read the comment policy.

Loading Comments...