Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

« Tomorrow is "Secure Your ID" Day | Main | "Doing Well by Doing Good" »

New HHS Guides For HIPAA Privacy Rule

Did you see that the Department of Health and Human Services (HHS) released some new guidance documents for the Healthcare Portability and Accountability Act (HIPAA) Privacy Rule compliance activities on September 17?

I need to go through them more thoroughly, but upon a quick scan they look like they contain some pretty good, and interesting, guidance information for both patients and healthcare providers...

The new "Patient Guide: When Health Care Providers May Communicate About You with Your Family, Friends, or Others Involved in Your Care" and "Provider Guide: Communicating with a Patient's Family, Friends, or Others Involved in a Patient's Care" outline scenarios for which healthcare providers can disclose protected health information (PHI), but also note that providers are NOT REQUIRED to do so even if a patient is incapacitated or not present.

The guides also include some information on interpreter services, documentation requirements for when PHI is shared, and the rules for picking up someone else's prescription, medical supplies, or PHI.

As a review, the Privacy Rule generally requires that if a patient is present, and able to make health care decisions, a provider must do one of three things before sharing information with a family member or friend: 1) obtain the patient's permission, 2) give the patient an opportunity to object and receive no objection, or 3) decide based on professional judgment and the circumstances that the patient does not object.

However, this new guidance indicates that if a patient is incapacitated or not present, a provider can share PHI if he/she believes "based on professional judgment" that disclosure is in the patient's best interest.

TrackBack

TrackBack URL for this entry:
http://www.realtime-itcompliance.com/type/mt-tb.cgi/814

Comments

I did not hear anything at all about this - thanks for sharing this information. It's so important for us all. I wonder why they are making these changes...

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Rebecca Herold's Bio:

Rebecca Herold,CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for over 18 years. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the 25 top privacy experts and on their list of the 9 best privacy consulting firms. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 11th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.