Health Information Compliance Alert

Question: Does a patient’s family medical history fall under information protected by HIPAA?

California Subscriber

Answer: Yes, a patient’s family medical history constitutes protected health information (PHI).

The HHS Office for Civil Rights (OCR) says that a patient’s family medical history becomes PHI once it’s a part of the medical record.

“When a covered health care provider, in the course of treating an individual, collects or otherwise obtains an individual’s family medical history, this information becomes part of the individual’s medical record and is treated as ‘protected health information’ about the individual,” OCR says.

Important: Even if a family member is mentioned in a patient’s medical history, the patient — not the family member mentioned — retains the control over who the information can be shared with. 

“Thus, the individual (and not the family members included in the medical history) may exercise the rights under the HIPAA Privacy Rule to this information in the same fashion as any other information in the medical record, including the right of access, amendment, and the ability to authorize disclosure to others,” OCR says.