HIPAA Q&A: You’ve got questions. We’ve got answers!
HIM-HIPAA Insider, October 6, 2014
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
Submit your HIPAA questions to Editor Jaclyn Fitzgerald at jfitzgerald@hcpro.com and we will work with our experts to provide you with the information you need.
Q: Within the pharmacy dispensing system at the facility where I am employed, we have the ability to enter free-form notes for certain records such as a patient record, prescription records, and physician records. The notes entered in the patient record are customer-service focused and not related to treatment or payment. Would these notes be considered PHI? Would there be a retention requirement concerning these notes?
A: If these notes contain patient-identifiable information, they would be considered PHI and must be protected from unauthorized use or disclosure under the HIPAA Privacy Rule. However, the Privacy Rule does not establish record retention requirements. Instead, state law/regulation establishes retention requirements for medical records and some other records.
Check your state law to see if there are any retention requirements for information in pharmacy dispensing systems. Your state board of pharmacy may be a good resource. Search "(state name) State Board of Pharmacy" into your web browser for more information (i.e., Texas State Board of Pharmacy).
Editor’s note: Mary D. Brandt, MBA, RHIA, CHE, CHPS, vice president of health information at Baylor Scott & White Health in Temple, Texas, answered this question for HCPro’s Briefings on HIPAA newsletter.
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
Related Products
Most Popular
- Articles
-
- Don't forget the three checks in medication administration
- Residency coordinators’ responsibilities
- RPA Subscriber Exclusive: February issue of Residency Program Alert now available
- Study: Shorter shifts reduces residents’ attentional failures
- Practice the six rights of medication administration
- Editor’s note
- The consequences of an incomplete medical record
- Nursing responsibilities for managing pain
- Note similarities and differences between HCPCS, CPT® codes
- Q&A: Primary, principal, and secondary diagnoses
- E-mailed
-
- White Paper: Postacute CDI: An Introduction to Long-Term Acute Care Hospitals
- Use modifiers -59, -91 to "explain" duplicate codes
- Tim Porter-O'Grady sounds off
- ICD-10-CM coma, stroke codes require more specific documentation
- Fracture coding in ICD-10-CM requires greater specificity
- Eight tips to improve MRI throughput
- Searched