Corporate Compliance

Q&A: Releasing a former inmate's medical record

Compliance Monitor, January 21, 2009

Q: We treat many patients who come from a state prison. When these patients come to our facility, the officer signs the patient in, and we follow HIPAA privacy requirements. After this person is released from prison, is it a HIPAA violation to release the patient’s medical record as long as there is a signed authorization?

A: After the patient is no longer in the custody of the state criminal system, the record is in the control of the patient. PHI can be released without authorization for treatment, payment, healthcare operations (TPO), and certain other exceptions described in the HIPAA privacy rule (keeping in mind there are likely state laws that provide additional privacy protections and may require a signed authorization even for TPO). Other releases, such as to a spouse or an attorney, require a signed authorization from the patient.

This question was answered by Chris Apgar, CISSP in the Feburary 2009 issue of the HCPro newsletter Briefings on HIPAA. To learn more about this publication visit the HCMarketplace.


0 comments on “Q&A: Releasing a former inmate's medical record


Most Popular