I think most of us now assume that our Protected Health Information is covered by HIPAA anytime we disclose it. But, that’s not true. I have noticed several examples lately where they ask you for your prescriptions, but there is no HIPAA disclosure. And, you now struggle with making something public or risking a counter-indication (i.e., drug-drug interaction) if you don’t disclose it.
- In one case, I was getting a massage, and they asked for a list of medications. Regardless of whether I had anything to disclose, I immediately wondered what could happen with that data and thought that their lack of security could be an issue.
- In another case, I was talking with a worker’s compensation provider who said that they were not covered by HIPAA (which appears to be true).
Can you think of other examples where you disclose information that you might prefer to keep private about your health condition only to realize that they are not held to the high standards which exist in the healthcare industry?
Of course, the most glaring example I always see is physician’s offices who have a sign-up list of patients just laying on the counter. Isn’t that a HIPAA violation? What about all the patient’s files laying around or the names you see pop up on the screen while they are scheduling an appointment for you. Isn’t that an issue?

February 12, 2008 



