Clear up the confusion related to HIPAA and white boards
HIM Connection, February 24, 2009
Want to receive articles like this one in your inbox? Subscribe to HIM Connection!
Q: May we use physicians’ names on whiteboards? Our emergency department wants to write consultant physicians’ names on the boards. Which HIPAA regulation applies?
A: HIPAA doesn’t specifically prohibit the use of whiteboards, but it requires covered entities to take reasonable steps to avoid incidental disclosures. Every organization should conduct a risk assessment to identify areas in which protected health information (PHI) may be vulnerable to incidental disclosure and take reasonable steps to avoid this.
Many organizations consider whiteboards too risky and too likely to expose PHI to the public or staff members who do not need to know. Consequently, best practice has been to avoid the use of whiteboards. However, writing a physician’s name on the whiteboard would not disclose PHI unless you also display patient information. Many organizations list the on-call physician or the day’s head nurse on whiteboards to notify staff members, patients, and families who is working on the unit. Unless you list the physician’s specialty after his or her name (e.g., psychiatrist, HIV specialist, or any other information that could suggest patient diagnoses), there should be no problem with this customer service–oriented procedure.
Editor’s note: Chris Simons, RHIA, director of HIMS and privacy officer at Spring Harbor Hospital in Westbrook, ME, provided these questions and answers. This Q&A originally appeared in the March issue of Medical Records Briefing. This information does not constitute legal advice. Consult your organization’s legal counsel for answers to specific privacy and security questions.
Want to receive articles like this one in your inbox? Subscribe to HIM Connection!
Related Products
Most Popular
- Articles
-
- Q/A: Volume requirement for reporting hydration services
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- Catch up on what's new with injections and infusions
- Topic: CMS, OESS post new security compliance review information, checklist
- HIPAA Q&A: Level of encryption needed for email
- Identify potential Medicaid RAC target areas
- Capturing all necessary codes for IUD insertion and removal can be challenging
- What does case-mix index mean to you?
- QA:Coding multiple initial infusions
- OB services: Coding inside and outside of the package
- E-mailed
-
- Q/A: Volume requirement for reporting hydration services
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- HIPAA Q&A: Level of encryption needed for email
- Q&A: Follow CMS' coding guidelines when using modifier -25
- Catch up on what's new with injections and infusions
- CMS has reformulated payments for some bilateral procedures
- New conflicts of interest create new challenges
- Q/A. One injection code or two?
- What does case-mix index mean to you?
- CHANGES COMING: Key differences in nationwide rollout
- Searched