The answer to this question has changed yet again. I’ve blogged on this topic several times in the past (see here, here and here), and described the question as a wriggling worm. Plaintiff Ciox Health, LLC has finally managed to catch that worm and share its bounty among those looking to charge third-party
HIPAA authorization
The Cost for a Copy of Medical Records? It May Depend Who’s Asking
By Elizabeth Litten on
Posted in HIPAA Authorizations, Individual Access Rights
The Report to Congressional Committees of the U.S. Government Accountability Office (“GAO Report”), required under the 21st Century Cures Act, came out about a month earlier than required, but this early bird failed to catch what continues to be a wriggling worm – what can a covered entity charge for these copies?…
Nine Tips for Avoiding HIPAA Breaches When Responding to Widespread Healthcare Emergencies
By Michael Kline on
The aftermath of the Orlando nightclub tragedy has led to much discussion about ways that healthcare providers can and should deal with compliance with health information privacy requirements in the face of disasters that injure or sicken many individuals in a limited time frame. One aspect is the pressure to treat patients while simultaneously fulfilling…
“I Want My PHI”, Part 2 – OCR Audits Will Focus on Individual Access Rights
By Elizabeth Litten on
We blogged on this back in early May, but compliance with individuals’ rights to access their PHI under HIPAA is even more critical now that OCR has announced that its current HIPAA audits will focus on an audited Covered Entity’s documentation and process related to these access rights.
In an email sent to listserv participants…
I Want My PHI! HIPAA Access Rights, Authorizations and HHS Guidance
By Elizabeth Litten on
Posted in HIPAA Authorizations, Individual Access Rights
Daily struggles to protect personal data from hacking, phishing, theft and loss make it easy to forget that HIPAA is not just about privacy and security. It also requires covered entities (CEs) to make an individual’s protected health information (PHI) accessible to the individual in all but a few, very limited circumstances. Recent guidance published…
Athletes Do Not Leave Their HIPAA Rights At The Locker Room Door
By Elizabeth Litten on
Posted in Articles, Privacy & Security
HIPAA has made an unlikely appearance twice already this month in news reports involving famous athletes.
Between the Pierre-Paul medical record tweet by ESPN reporter Adam Schefter earlier this month (discussed by my partner and fellow blogger Bill Maruca here) and the ticker-tape parade featuring confetti made of shredded (but apparently legible) medical information…