Am I Violating HIPAA?

Every nurse and health care provider knows that it is important to maintain patient confidentiality.  We are required to care for patients while respecting their privacy.  With that in mind, here are some tips on protecting patient privacy:

1. Do NOT provide patient information to anyone. Even if a patient’s family or friends ask you for information, do NOT provide it.  I know on the surface it may seem harmless but never provide anything unless the patient specifically consents the person can have said information.
2. When asked to provide patient information over the phone, be sure to verify the caller before providing any protected health information. There was a situation where a radio station prank called a hospital where Princess Kate had just delivered her baby.  In speaking with a nurse, they were given the requested information.
3. Do not copy any page of the patient’s medical record for any family member. Any request for pages from a medical record needs to go through the medical records department.
4. When documenting on the computer, make sure that others cannot see your screen and the information you are entering.
5. Other than your own patients, do NOT access medical records of any other patient. This is a violation of HIPAA.
6. Do not speak about a patient in public locations. Even if you are with a doctor while in a public area such as an elevator or a cafeteria, do NOT discuss any of the patient’s information.
7. Be careful of what you post on social media. Do not put anything that potentially could be identified in relation to a patient.  Recently there was situation before the Board where nurses discussed a patient’s funeral and had discussed paying their respects.  This was a HIPAA violation.
8. Do NOT post any pictures of patients on social media. Even if the patient consents, do NOT post them.  Without an official HIPAA authorized release, that would be a violation.
9. Ask yourself, “Do I really need to know this information in order to do my job?” Most of the time, you probably do not need to know the information.
10. If in doubt, whether it is a privacy issue or not, ask your facility’s privacy officer.

Any time that you are entrusted with the care of a patient, you automatically are also entrusted with their personal information.  Always protect it as if it were your own personal information.

Again, if you have a doubt, check with the privacy officer.