When HIPAA Doesn’t Apply
Got a call from a long-time patient over the weekend. Hearing a not overly alarming story but one that was not terribly reassuring either, I suggested she go to the Emergency Department.
Later that morning, sitting at an internet cafe with DSS eating breakfast, each of us surfing on our respective laptops, he says conversationally, “So I see Miss LTP is in the ER.”
My heart stopped and my stomach dropped. Had he managed to access the voicemail program I use for after hours calls? My EMR? Had I left shortcuts up to any patient-related materials on that machine? When had I last used it anyway? My mind was racing. I wasn’t all that concerned specifically about him knowing that a particular person was in the ER, since he understands confidentiality. But if he was able to access confidential patient information, did that mean I had a security breach?
“How do you know that?” I asked him carefully, after a very long pause, during which all of the above ran through my head. Read more »
*This blog post was originally published at Musings of a Dinosaur*