Medicare Compliance & Reimbursement

OCR clarifies the impact of HIPAA privacy rules on patient directories. 

Hospitals got some clarification Nov. 4 on how they should handle facility directories - while staying compliant with the Health Insurance Portability and Accountability Act privacy rule.

In new updates to the frequently asked questions section of its Web page, the HHS Office for Civil Rights explains that HIPAA allows providers to maintain facility directories that include the patient's name, location in the facility, general health condition (without specific medical information) and religious affiliation. Patients must be informed of the directory and given the opportunity to restrict disclosures or opt out altogether. If they don't opt out, however, facilities can disclose to visitors or callers the patient's general health condition, their location, their phone numbers and whether they have died or been treated or released.

Other new additions to the FAQ address fax, e-mail and telephone communications; discussions with family members; and emergency department issues.

To see OCR's FAQ, go to http://hhs.gov/ocr/.