Test YOUR HIPAA Knowledge!

Is this case a HIPAA violation?

• No
• No. The Medical Release of Information was provided
• Yes

Case: “Helene” provided a medical release of information ?to her doctor’s office to release (1) test result to her prospective employer. The ?office sent the following: her surgical history, obstetric history, gynecological history, and other sensitive reproductive health information - as well as the (1) requested test result .

?Answer:

"Helene" had not given authorization to release her protected health information (PHI) beyond (1) specific test.??Office of Civil Rights??(OCR) determined that the disclosure of the records without first obtaining valid consent was a violation of the General Rules of the HIPAA Privacy Rule concerning uses and disclosures of protected health information – 45 C.F.R. § 164.502(a).

?

This is an actual? OCR case.

The OCR penalty was $35,581??and?? directive to complete ?a corrective action plan, which OCR will monitor for two years.?

?

Answer is : Yes

HIPAA, privacy, and confidentiality are becoming more complex. Making the wrong move can result in penalties, civil lawsuits, and even criminal penalties. Criminal HIPAA violations include theft of patient information for financial gain and wrongful disclosures with intent to cause harm. A lack of understanding of HIPAA requirements is no longer a shield.

Training is the best defense. Start simply by taking our weekly Linkedin HIPAA Challenge.

?

?

?