HIPAA Violation Case Summary

HIPAA is the federal Health Insurance Portability and Accountability Act of 1996. The primary goal of the law is to make it easier for people to keep health insurance, protect the confidentiality and security of healthcare information and help the healthcare industry control administrative costs. Under HIPAA, patients have the right to access and control their health records. In order to safeguard protected health information (PHI, or patients’ individually identifiable information), health care providers must restrict access to the information and have patients’ permission to disclose it.

1. Mrs. Smith had a pregnancy test. Mr. Smith called Mrs. Smith’s physician and requested a copy of Mrs. Smith’s test results. Can/Should the physician release the results of the pregnancy test to Mr. Smith over the phone? (Use law and ethics to defend your answer) Why or why not?

Discuss what is required to disclose patient information to family members, friends, and when ordered by courts or government

Specific Purpose: I want to inform my audience about HIPAA “Health Insurance Portability and Accountability Act”.

Jim Philips is the attorney for Karen Munstrom. Karen is filing suit against Howard Doe in a domestic dispute. Jim Philips sends Memorial Hospital an original authorization that is signed and dated by Karen Munstrom. The authorization, addressed to your hospital, includes the dates of the records requested. The authorization does not state the type or subject of the information to be disclosed. The records of Ms. Munstrom are related to a stay for alcohol rehabilitation.

The law that prohibits unauthorized access of patients charts is HIPAA. HIPPA is the Health Insurance Portability and Accountability Act of 1996. HIPPAS number 1 priority is to keep patients Health Medical Records protected and confidential.

When the referral is received from a physician outside the healthcare provider’s network, paper medical records relating to the health issue are requested, including office notes and test results. After the patient’s paper medical records are received by the scheduling office, the scheduler manually reviews the records for the diagnosis and reason for the referral to determine how to appropriately schedule the office visit. For example, if the patient recently suffered a stroke, the patient would be scheduled with a stroke specialist rather than a general neurologist.

What the HIPAA law states. Health Insurance Portability and Accountability Act (HIPAA) is a law that was enacted in 1996 establishing safeguards and rules to protect patients demographics and medical records. These rules limit the circumstances of how health records are used or obtained without the patient's authorization. HIPAA has set national standards that require these safeguards to maintain the attainability of health records and keeping them classified. This rule applies to any institutional and noninstitutional providers and only a written authorization by the patient will allow any use of their health records be disclosed.

I would tell patients who inquire about passed patients would be that "I will find out where they are or what has happen to them" and will get with back with them. It is important for me not to release too much information because of HIPAA rules. Releasing personal or medial information without a written consent can get me in big trouble. If I know its a close friend I will ask the family if its ok for me to tell the patient who ask about their relative's condition or whereabouts. Its always better to ask for permission to release information that way your not breaking any privacy rules.

The forms restrict access to patient’s information by seeking the patient’s permission to disclose such information in certain circumstances only. The forms thus must be available in the HIPAA compliance manual. The HIPAA forms are crucial in implementing access controls to keep track of the persons who access the patient’s information. The new patient forms include patient history forms, patient registration form, advanced directive to physician forms, authorization for use and disclosure of protected health information, HIPAA Contact Disclosure, HIPAA notice of privacy practices (Acknowledgement), and well-being assessment form.

During this research, there has been a collection of data that had been connected to the instances of HIPAA violations within the United States. There are various cases that have been reported through patients and employees where very personal medical information has been exposed unlawfully for personal gain. These cases have not only put a company at reputational risk. But these cases can also place a patient and or healthcare company in a terrible financial stipulation. This thesis will include a series of charts and tables that describe the fluctuation of such cases involving different examples of HIPAA violations. Not only will there be data of these instances but there will be illustrations of how both patients and healthcare employees exemplify HIPAA violations. These cases will be verified from an external and internal evaluation. Suggestive protocol will be demonstrated to guide one along to ensure the possibility of another case of HIPAA violation is prevented. Protocols and examples are being credited by diverse information.

Even though hipaa violations are an important standard in preventing many individuals from causing several breaches of information from getting out, it is important to work on a strategies within several health care organizations that will work with the privacy rules regarding violation laws. “Jill Granger & Laura Cataldo (2013) reports When working in the healthcare setting, it is important to consult with the guidelines established by one's institution and to participate in any training programs to insure that the appropriate steps are being taken to maintain privacy. There are also a variety of additional resources available from the federal government and professional organizations to assist in the training process that may be especially

Individuals that believe that their privacy or someone else’s privacy was violated in regards to the HIPAA law can file a complaint. According the Department of Health and Human Services, the complaints will be handled by the Office of Civil Rights. According to the HHS website, a complaint can be filed in writing, either electronically or on paper by mail, fax, or email. The name of the organization and the act believed violated the privacy requirement needs to be include in the complaint (US Department of HHS). The complaint must be filed within 180 days of the believed act, and HIPAA law prohibits retaliation from an organization because someone filed a complaint. As outlined by the HHS website enforcement is made after a complaint was

The article I found about a HIPAA breach in confidentiality involved a Walgreens pharmacist in Indiana. The pharmacist looked up the prescription history of someone her husband had previously dated. She then shared the information she found with her husband who in turn tried to use the information in a paternity suit. The lady whose information was accessed complained to Walgreens officials. As a result the pharmacist was given a written warning and required to retake training regarding HIPAA rules. The Marion Superior Court jury found Walgreen's responsible for the actions of their employee. They ordered Walgreens to pay $1.44M in damages and the Indiana Court Of Appeals upheld the decision. I looked on the Kentucky State website about

In this paper, I will discuss the principles that permit disclosure of protected health information with or without the patient’s consent for each of the four categories, government agencies, legal agencies or representatives and research groups. I will also state whether I feel privacy safeguards are adequate to support those principles.