Educating the consumer about HIPAA privacy rule
Rehab patients more savvy than others
Hospitals and health care workers have gone to great effort to understand the patient privacy rules, but more needs to be done to educate the public, according to some health care providers. The Health Insurance Portability and Accountability Act (HIPAA) became effective for all health care providers and health plans, starting in April 2003, with full compliance required by April 2004.
The rule was met with concern and questions from the health care community when it was first introduced, but according to a hospital representative who addressed a Department of Health and Human Services (HHS) panel in July, health care providers have devoted much time and effort to educating themselves about the rule.
However, Sara Howley, director of corporate communications for North Broward (FL) Hospital District, told the HHS panel that the public and media need more education about the rule. Howley told the National Committee on Vital and Health Statistics’ Subcommittee on Privacy and Confidentiality, "Hospitals have undertaken a great deal of effort to ensure that their staff, physicians, vendors, and volunteers understand the new rules and follow them," according to an HHS press release. "We believe that the HIPAA privacy rules are working, but there are areas where greater education is needed."
Rehab facilities have an advantage when it comes to patients being up to date on privacy issues, says Bob Norwicke, director of corporate compliance and performance management for Magee Rehabilitation Hospital in Philadelphia. Norwicke serves as Magee’s privacy officer. "Because we’re rehab, a lot of our patients have been in the health care system already, so they are pretty familiar with privacy and information issues," he adds.
Norwicke meets personally with patients in his 96-bed facility when they have questions about privacy and access to patient information, and he says the questions he most often gets have to do with patients’ wishes to see their own medical records. "Before HIPAA, access to patients’ own records was kind of an unclear area with the public, and there seemed to be a cultural belief that you couldn’t see your medical records, that it was secret," Norwicke explains. "So now that seems to be the thing we deal with most — people wanting to see their own records."
More complex are situations involving patients admitted with serious head injuries or who have been judged incompetent for other reasons, and determining who has the right to access those patients’ records.
The suggestion that HHS provide more information to consumers in an easily understood format is not a bad idea, according to Judy Colby, RN, COHN, manager of Glendale Adventist Occupational Medicine Center in Burbank, CA. "It’s true, in the sense that patients who are more accustomed to a more streamlined, familiar approach, when they could just call up and say, Fax this to my other doctor,’ might be having some difficulty with the new rule on privacy," Colby explains. "Or, for example, I have a 22-year-old child, and I might have a reason to ask [the child’s physician] a medical question, and all of that is different now," she points out.
Recognizing the need for public education, the American Medical Association developed a template for a letter it suggests health care providers personalize with their individual facility’s privacy practice and send or give to patients. (See sample letter.)
One aspect of the privacy act that some patients don’t fully understand is that there are limits to their rights to access their records, Colby says. Although a patient has the right to access, copy, and inspect his or her protected health care information within a designated record set, there are limits and the patient’s request, if it falls within exceptions to the right of access, may be denied. "There are some times when patients do get frustrated," she adds. "They may think they have complete access to a record, when they don’t."
And while patients have a right to amend protected health care information within a designated record set, that does not mean that they have the right to change a medical record, and is an area that bears further education, Norwicke points out.
Other suggestions that have been made to HHS by providers, besides giving patients easy-to-understand information, are to encourage law enforcement and rescue personnel to tailor their limits on information to those imposed on hospitals, to prevent private information from being divulged through those agencies during emergencies; offering training to media representatives who cover health care issues, for their own education as well as to help them educate the public; and to provide health care providers with questions and answers pertaining to real-life scenarios involving aspects of the privacy rule that providers still struggle with.
Need more information?
- Judy Colby, RN, COHN, Manager, Glendale Adventist Occupational Medicine Center, 2211 W. Magnolia Blvd., Suite 110, Burbank, CA 91506. Phone: (818) 526-1565. E-mail: [email protected].
- Bob Norwicke, Director, Corporate Compliance and Performance Management, Magee Rehabilitation Hospital, 1513 Race St., Philadelphia, PA 19102. Phone: (215) 587-3000. E-mail: [email protected].
Hospitals and health care workers have gone to great effort to understand the patient privacy rules, but more needs to be done to educate the public, according to some health care providers.
Subscribe Now for Access
You have reached your article limit for the month. We hope you found our articles both enjoyable and insightful. For information on new subscriptions, product trials, alternative billing arrangements or group and site discounts please call 800-688-2421. We look forward to having you as a long-term member of the Relias Media community.