HIPAA Q&A: You’ve got questions. We’ve got answers!
HIM-HIPAA Insider, September 22, 2014
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
Q: After scheduling a colonoscopy, I received information about a colonoscopy prep company with which the practice has a business associate (BA) relationship.
The prep company's website features a photograph of my physician and an appointment reminder about my screening. My physician's practice has shared my information with a company that can provide the prep kit I need for my screening. Does this constitute marketing? Can a BA act as a cover for what is essentially forced marketing to a target group without consent? May a patient ask to see the BA contract to try to understand who benefits from the relationship and how?
A: If the prep company has publicly posted your appointment data along with your name or your picture, it is a breach of your health information. It is recommended you discuss this with the practice if this is the case.
Sharing your health information with a BA for the purpose of treatment is not considered marketing. The practice does not sell the prep kit you need for the screening. In this situation, similar to referral to another supplier to purchase other healthcare supplies, the practice is working with an outside vendor to provide these supplies.
If the prep company uses your information to market other healthcare supplies or services without your authorization, this would be considered marketing and a violation of the HIPAA Privacy Rule. In this case, you have the right to register a complaint with the practice and your regional OCR office.
The practice may or may not share its BA agreement with you because that is not an individual right granted by the HIPAA Privacy Rule.
Editor’s note: Chris Apgar, CISSP, president of Apgar & Associates, LLC, in Portland, Oregon, answered this question for HCPro’s Briefings on HIPAA newsletter.
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
Related Products
Most Popular
- Articles
-
- Don't forget the three checks in medication administration
- The consequences of an incomplete medical record
- Note similarities and differences between HCPCS, CPT® codes
- Nursing responsibilities for managing pain
- Practice the six rights of medication administration
- Prevent dehydration with nursing interventions
- Q&A: Primary, principal, and secondary diagnoses
- Steps for maintaining patient privacy
- Know the medical gas cylinder storage requirements
- Neurological checks for head injuries
- E-mailed
-
- Understand the spine to code back procedures correctly
- Q/A: Correct use of modifier -PT
- Q&A: Use yes/no queries to resolve surgical complication questions
- Get to the heart of cardiac catheterization coding
- Documentation challenges for skin and dermatology coding
- Clinically Speaking: Check CDI efforts related to functional quadriplegia
- Searched