Health Information Compliance Alert
Reader Questions:
Citizen HIPAA
Published on Wed Oct 06, 2010
Question:
Answer:
Your office should never act on a Patriot Act request for information unless the request is accompanied by proof that it is absolutely necessary, experts say. And, you should contact your legal counsel before you disclose anything, asserts Mark Schreiber, an attorney with Boston's Palmer & Dodge.According to the AHIMA's "Homeland Security and HIM," all requests for information under the Patriot Act must be made first to a judge or magistrate -- not your office. Once a designated official has ruled on the request, it can then be delivered to your door.
Remember:
You must obtain proof that a judge ruled the request necessary for an "authorized investigation not concerning an American or to protect against terrorism or clandestine intelligence."The Bottom Line:
Hand over all information requests tagged for intelligence purposes to your legal counsel. Your attorney is better equipped to know "under what authority the agent is coming to you and under what authority you can make the disclosure," Schreiber says.Other Articles in this issue of
Health Information Compliance Alert
- Privacy Compliance:
Top Secret Disclosures
The accounting requirement's not as open as you think. The good news is you don't [...] - You Be The Security Officer:
Could An Internet Connection Wreck Our Compliance Efforts?
Keeping your patient information safe online takes just a bit of commonsense. Question: Our office [...] - Reader Questions:
Citizen HIPAA
Question: Our office was asked for a patient's medical record in accordance with the Patriot [...] - Reader Questions:
My Lawyer Said What?
Question: Our office often provides patients' protected health information to our legal representatives. Should we [...] - Current Trends:
3 Tips Help You Avoid HIPAA Trouble Due to Staff Posts On Social Media Forums
Prohibit staff from making this No. 1 privacy mistake. Online social forums provide a great [...] - Compliance Strategies:
Don't Monkey Around At Home With Patients' PHI
Lax policies could throw a wrench in your HIPAA compliance plan. Do you allow your [...] - Security Compliance:
Hold On To E-Mailed PHI & Let Go Of Privacy Rule Violations
Remember: You have to save PHI in e-mails, too. Does your staff receive e-mail messages [...] - Security Strategies:
Keep Staff on Same HIPAA Page With Set Sanctions
Applying sanctions consistently when employees disclose PHI is most effective. Suppose a staff member switches [...] - Compliance Strategies:
How To Nip Incidental Disclosures In The Bud
You can stop incidental disclosures from invading your office. Believe it or not, incidental disclosures [...]
View All
