HIPAA Disclosures to Family, Friends, and Others Involved in an Individual’s Care and for Notification

by  Wyn Staheli
October 6th, 2017

In light of recent tragic events, the OIG has released a reminder that HIPAA allows for certain disclosures in these types of situations. The reminder dated October 3, 2017 states the following:

Following the recent mass shooting in Las Vegas, the HHS Office for Civil Rights (OCR) is taking this opportunity to clarify that the HIPAA Privacy Rule allows patient information to be shared for the following purposes and under the following conditions:

Disclosures to Family, Friends, and Others Involved in an Individual’s Care and for Notification A HIPAA covered entity may share protected health information with a patient’s family members, relatives, friends, or other persons identified by the patient as involved in the patient’s care. A covered entity also may share information about a patient as necessary to identify, locate, and notify family members, guardians, or anyone else responsible for the patient’s care, of the patient’s location, general condition, or death. This may include, where necessary to notify family members and others, the police, the press, or the public at large. See 45 CFR 164.510(b).

Individuals, family members and friends may find more guidance on this topic at: https://www.hhs.gov/hipaa/for-individuals/family-members-friends/index.html

Health care professionals may find OCR’s FAQs on Disclosures to Friends and Family Members at: https://www.hhs.gov/hipaa/for-professionals/faq/disclosures-to-family-and-friends

Disclosures to the Media or Others Not Involved in the Care of the Patient/Notification Upon request for information about a particular patient by name, a hospital or other health care facility may release limited facility directory information to acknowledge an individual is a patient at the facility and provide basic information about the patient’s condition in general terms (e.g., critical or stable, deceased, or treated and released) if the patient has not objected to or restricted the release of such information or, if the patient is incapacitated, if the disclosure is believed to be in the best interest of the patient and is consistent with any prior expressed preferences of the patient. See 45 CFR 164.510(a). In general, except in the limited circumstances described elsewhere in this bulletin, affirmative reporting to the media or the public at large about an identifiable patient, or the disclosure to the public or media of specific information about treatment of an identifiable patient, such as specific tests, test results or details of a patient’s illness, may not be done without the patient’s written authorization (or the written authorization of a personal representative who is a person legally authorized to make health care decisions for the patient). See 45 CFR 164.508 for the requirements for a HIPAA authorization.

OCR offers an FAQ on disclosures to the media that offers additional information: https://www.hhs.gov/hipaa/for-professionals/faq/2023/film-and-media/index.html


Minimum Necessary For most disclosures, a covered entity must make reasonable efforts to limit the information disclosed to that which is the “minimum necessary” to accomplish the purpose. (Minimum necessary requirements do not apply to disclosures to health care providers for treatment purposes.) Covered entities may rely on representations from a public health authority or other public official that the requested information is the minimum necessary for the purpose. Internally, covered entities should continue to apply their role-based access policies to limit access to protected health information to only those workforce members who need it to carry out their duties. See 45 CFR §§ 164.502(b), 164.514(d).

OCR offers a number of FAQs on this topic at: https://www.hhs.gov/hipaa/for-professionals/faq/minimum-necessary

HIPAA Disclosures to Family, Friends, and Others Involved in an Individual’s Care and for Notification. (2017, October 6). Find-A-Code Articles. Retrieved from https://www.findacode.com/articles/hipaa-disclosures-to-family-friends-and-others-involved-in-an-individual-s-care-and-for-notification-32049.html

© InnoviHealth Systems Inc

Article Tags  (click on a tag to see related articles)

Complete & Easy HIPAA Compliance

A simple and practical guide to implementing HIPAA, HITECH, and Omnibus Final Rule components. Includes the forms and policies and information you need to meet compliance requirements. Plus over 50 customizable forms!



Publish this Article on your Website, Blog or Newsletter

This article is available for publishing on websites, blogs, and newsletters. The article must be published in its entirety - all links must be active. If you would like to publish this article, please contact us and let us know where you will be publishing it. The easiest way to get the text of the article is to highlight and copy. Or use your browser's "View Source" option to capture the HTML formatted code.

If you would like a specific article written on a medical coding and billing topic, please Contact Us.


contact

innoviHealth Systems, Inc.
62 East 300 North
Spanish Fork, UT 84660
Phone: 801-770-4203 (9-5 Mountain)
Email:
free demo
request yours today
pricing
for any budget
sign IN
welcome back!

Thank you for choosing Find-A-Code, please Sign In to remove ads.