HIPAA Requirements

The following is an overview of the HIPAA requirements and policies with regards to confidentiality. Keep in mind though, that the policies are always being reviewed especially with the evolving technology as it affects how information is stored.

Employees and Employers

For employers, HIPAA requires that health insurance premiums not be based on health related matters. They are also not allowed. Preexisting conditions may not be considered grounds for punishing an employee.

In addition, the act provides for continuous health care coverage upon termination of the job. The HIPAA regulations also ensure the patient’s right to privacy with respect to health.

HIPAA Requirements for Hospitals and Doctors

Information that you provide to doctors, hospitals and clinics are required to be kept private and confidential. However, patients have the option of waiving the privacy rights so the documents may be shown to spouses, relatives and other people.

The data may also be disclosed if there are any legal issues. Facts about the case may be used for scientific research. But the patient’s name will be kept confidential.

Any information you discuss with medical personnel are all confidential. These include disease symptoms, treatment and diagnosis; these cannot be disclosed. The only time the information can be released is when the patient signs a waiver of consent.

Sales and Marketing Promos

In line with patient privacy, HIPAA laws require that the records be kept away from groups that may use it for marketing. In other words, HIPAA expressly forbids the health information from being given to pharmacy sales persons. The information cannot be given to anyone involved in drug experimentation programs. The only exception is if the patient agrees to it.

Other Facts

HIPAA will not force employers to provide health care insurance if they don’t usually offer it. The health practitioner can discuss the matter only with the patient, but the patient may assign a representative on their behalf. In most states, the covered entity is required to have copies of the records in case they are needed in a legal matter.

With respect to psychiatric records, a report of the examination and treatment may be provided instead. A patient can request all the records pertaining to their case. The request must be written down.

The HIPAA requirements are designed to give patients privacy and protection. Bear in mind that there may be some variations state by state, so make sure that you check the state laws.