Corporate Compliance

Q&A: HIPAA and patient directories

Compliance Monitor, January 23, 2004

Want to receive articles like this one in your inbox? Subscribe to Compliance Monitor!

The rule typically avoids this level of specificity. However, a helpful approach to interpreting the rule in real life situations is to consider the rule-writers' intent. From that viewpoint, it seems clear that all directories or listings of a facility's patients should have comparable privacy protection. In practice, it's likely that professional judgment will come into play more often in the emergency room (ER) than in inpatient areas. In the ER, patients may not be conscious or in a condition to make privacy-related decisions. However, a hospital should be able to encompass both under its patient directory privacy policy. Just be sure your hospital is well-informed about the appropriate handling of patient information requests from the media, law enforcement, and others not involved with the patient's care.

This question was answered by Kate Borten, CISSP, is the founder of The Marblehead Group, Inc., a national security and privacy consulting firm focused on the health care industry.



Want to receive articles like this one in your inbox? Subscribe to Compliance Monitor!

    Strategies for Health Care Compliance
  • Strategies for Health Care Compliance

    News and real-life examples to increase the effectiveness of your compliance program. Strategies for Health Care Compliance...

  • Compliance Monitor

    This HTML e-mail newsletter delivers news on Medicare and Medicaid fraud and abuse, as well as recent documents and targets...

  • Medicare Weekly Update

    Each issue of Medicare Weekly Update includes the latest CMS proposed and final rules, CMS manual revisions, and...

  • Medicare Update for Physician Services

    Medicare Update for Physician Services is a free, monthly e-zine that delivers news and information to help physician...

Most Popular

Related Articles