HIPAA Q&A: You’ve got questions. We’ve got answers!
HIM-HIPAA Insider, September 22, 2014
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
Q: After scheduling a colonoscopy, I received information about a colonoscopy prep company with which the practice has a business associate (BA) relationship.
The prep company's website features a photograph of my physician and an appointment reminder about my screening. My physician's practice has shared my information with a company that can provide the prep kit I need for my screening. Does this constitute marketing? Can a BA act as a cover for what is essentially forced marketing to a target group without consent? May a patient ask to see the BA contract to try to understand who benefits from the relationship and how?
A: If the prep company has publicly posted your appointment data along with your name or your picture, it is a breach of your health information. It is recommended you discuss this with the practice if this is the case.
Sharing your health information with a BA for the purpose of treatment is not considered marketing. The practice does not sell the prep kit you need for the screening. In this situation, similar to referral to another supplier to purchase other healthcare supplies, the practice is working with an outside vendor to provide these supplies.
If the prep company uses your information to market other healthcare supplies or services without your authorization, this would be considered marketing and a violation of the HIPAA Privacy Rule. In this case, you have the right to register a complaint with the practice and your regional OCR office.
The practice may or may not share its BA agreement with you because that is not an individual right granted by the HIPAA Privacy Rule.
Editor’s note: Chris Apgar, CISSP, president of Apgar & Associates, LLC, in Portland, Oregon, answered this question for HCPro’s Briefings on HIPAA newsletter.
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
Related Products
Most Popular
- Articles
-
- Math can be tricky: TJC corrects ABHR storage requirement
- Air control equals infection control
- Don't forget the three checks in medication administration
- Note similarities and differences between HCPCS, CPT® codes
- Five ways to safeguard your patients' valuables
- The consequences of an incomplete medical record
- Q&A: Primary, principal, and secondary diagnoses
- OB services: Coding inside and outside of the package
- Skills of effective case managers
- Practice the six rights of medication administration
- E-mailed
-
- Air control equals infection control
- OSHA HazCom updates include labeling, SDS requirements
- Plan of Care Supports Documentation of Homebound Status
- Note similarities and differences between HCPCS, CPT® codes
- Note from the instructor: CMS clarifies billing guidelines on proper billing for drugs in a single-dose or single-use vial, including billing for discarded drugs
- Neurological checks for head injuries
- Modifiers and medical necessity
- Follow these tips to properly report bladder catheter codes
- Five ways to safeguard your patients' valuables
- Differentiate between types of wound debridement
- Searched