Wiki PHI, HIPAA and patient acct balances

[LBJ]

I have always been told that patient account balances are considered part of PHI and thus protected by HIPAA, but I have a provider asking me to ALWAYS disclose account balances to anyone who questions if they are requesting for the purpose of making a payment. I don't feel that this is appropriate.
As I research HIPAA in my quest to find the "black and white" proof to either prove (or disprove) my point, I find that "information for payment purposes" mostly relates to insurance carriers and not "parents who pay the bills".
From the hhs.gov website I find:
What Information is Protected

Protected Health Information. The Privacy Rule protects all "individually identifiable health information" held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper, or oral. The Privacy Rule calls this information "protected health information (PHI)."12

“Individually identifiable health information” is information, including demographic data, that relates to:

1. the individual's past, present or future physical or mental health or condition,
2. the provision of health care to the individual, or
3. the past, present, or future payment for the provision of health care to the individual,
and that identifies the individual or for which there is a reasonable basis to believe it can be used to identify the individual.13 Individually identifiable health information includes many common identifiers (e.g., name, address, birth date, Social Security Number)......

Any input would be greatly appreciated!!

 

[dclark7]

HIPAA provides disclosure for Treatment, Payment and Healthcare Operations. If you are only disclosing the amount owed and not the reason for th patient's visit you are releasing it for both payment purposes and for Healthcare Operations which is described as 1) Administrative, financial, legal and quality improvement activities. and 2) Necessary to run business and support core funtions of treatment and payment.
HIPAA also states you may diclose PHI relative to person's involvement in care or payment to family, friends or others odentified by the individual (patient). You can only release the minimum necessary to accomplish the intended purpose (in this case payment).
For more information you can check out http://www.hhs.gov/ocr/privacy/hipaa/understanding/training/udmn.pdf
They have some training materials to help you undestand HIPAA better.

Hope this helps.

Doreen, CPC