Confidentiality
What is Privacy?/ the Privacy Rule
(Standards for Privacy of Individually Identifiable Health Information)
The Privacy Rule is to protect the confidentiality of medical records and other personal health information. The rule limits the use and release of individually identifiable health information; gives patients the right to access their medical records; restricts most disclosure of health information to the minimum needed for the intended purposes; and establishes safeguards and restrictions regarding disclosure of records for certain public responsibilities, such as public health, research and law enforcement. Improper uses of disclosures under the rule are subject to criminal and civil sanctions prescribed in HIPAA (the federal Health Information Portability and Accountability Act).
Privacy Dos and Don’ts
|
Do |
Don’t |
|
|
Ask yourself, “Do I need to know this to do my job?” before looking at patient health information |
Talk about patients in public places, such as elevators or cafeteria lines. |
|
|
Close patients’ room doors when caring for them or discussing their health. |
Choose computer passwords that can be easily guessed (such as your last name or your child’s name). |
|
|
Close curtains and speak softly when caring for patients or discussing their health when a roommate is present. |
Share your computer password with anyone. |
|
|
Follow CHOP-specified procedures for disposing of patient information – secure patient information until it is ready to be destroyed. |
Let faxes or printed e-mails with patient information lie around – file them in the medical record or dispose of them before anyone else can see them. |
|
|
Turn computer screens so passerby can’t see information |
Walk away from open medical records to care for another patient. |
|
|
Double-check e-mail addresses before sending patient information. |
Keep white boards or other materials that connect patients’ names with their conditions out in the open where passerby can see them. |
|
|
Log off computers when you’re done. Avoid writing your computer access code on paper and leaving it on or near your PC. |
Leave phone messages about a patient’s health with anyone but the person you are trying to reach or leaving messages containing patient information on answering machines |
|
|
Report anyone you see breaking the rules to your supervisor or the compliance hotline. |
Give out a patient’s condition or location without making sure you are following hospital policies. |
|