{"id":2775,"date":"2020-04-01T07:27:46","date_gmt":"2020-04-01T07:27:46","guid":{"rendered":"https:\/\/www.empowerelearning.com\/blog\/?p=2775"},"modified":"2023-02-14T06:27:30","modified_gmt":"2023-02-14T06:27:30","slug":"expert-hipaa-advice-to-empower-you-against-the-coronavirus","status":"publish","type":"post","link":"https:\/\/www.empowerelearning.com\/blog\/expert-hipaa-advice-to-empower-you-against-the-coronavirus\/","title":{"rendered":"Expert HIPAA advice to empower you against the coronavirus"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">As of yesterday evening, we have had 188,000 confirmed cases of COVID-19 infections spread across 50 states. An alarming number.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The first against the coronavirus is now, in effect, a war against spreading infections and the mounting death toll. The infections are showing no signs of subsiding; New York alone has 76,000 cases. For California, it\u2019s 7600.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The US healthcare system is now stressed to its peak. Under these dreadful circumstances, can Covered entities continue to comply with <a href=\"https:\/\/www.empowerelearning.com\/online-hipaa-training\/\">HIPAA<\/a> laws without compromising with patient care?\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In the article below, we will look at the major HIPAA challenges that healthcare providers are currently struggling with; and how the Health and Human Services (HHS) is helping them through. We\u2019ll take a deeper look at the following list of challenges.\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Can you share the PHI of a person infected with coronavirus?<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The circumstances in which can you share or disclose the PHI<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Can you tell the family or friends of a patient, if he or she has been infected by the coronavirus disease?<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">How to collaborate with other providers and the public agencies?\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Can a patient restrict you from sharing their condition?<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">How to deal with PHI requests from first responders, prison officers or law enforcement agencies?<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Can you use telehealth services for communicating with your patients?\u00a0<\/span><\/li>\n<\/ul>\n<p><b>Using Patient Health Information (PHI)<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Under such dreaded circumstances, it may feel natural to use or disclose patient health information at your discretion and without patient\u2019s consent. Beware! You cannot do so. Sharing of patient information is still guided by the HIPAA. All healthcare providers, covered entities or business associates must remain compliant with the privacy and Security rule under all circumstances.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The HIPAA privacy rule, however, allows the healthcare providers to use or disclose PHI for critical purposes, such as for treating patients and ensuring public safety.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Covered entities can disclose PHI, without a patient\u2019s consent, if it\u2019s necessary for the treatment of a patient, or if the disclosure can safeguard public health or safety. Business Associates may also be able to disclose the necessary information on behalf of the covered entity, as long as the disclosure is permitted within the parameters of their Business Associate Agreement.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For details of the PHI that you can share, you can read the <\/span><a href=\"https:\/\/www.hhs.gov\/sites\/default\/files\/february-2020-hipaa-and-novel-coronavirus.pdf\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">HHS OCR bulletin<\/span><\/a><span style=\"font-weight: 400;\"> released in February.\u00a0<\/span><\/p>\n<p><b>Disclosing PHI of COVID-19 patients<\/b><\/p>\n<p><span style=\"font-weight: 400;\">As per the <\/span><a href=\"https:\/\/www.hhs.gov\/sites\/default\/files\/covid-19-hipaa-and-first-responders-508.pdf\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">HHS OCR guidance<\/span><\/a><span style=\"font-weight: 400;\"> released on March 24, a covered entity CAN share the name and other identifying information of people infected with or exposed to the coronavirus disease under certain <\/span><i><span style=\"font-weight: 400;\">permitted circumstances<\/span><\/i><span style=\"font-weight: 400;\">. They can share the PHI of such individuals with:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">First responders, such as paramedics and the law enforcement, and<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Public health authorities, such as the CDC.<\/span><\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">This also includes officials of a correctional institute or a law enforcement officer having lawful custody of another person.\u00a0<\/span><\/p>\n<p><i><span style=\"font-weight: 400;\">Note: Patient\u2019s HIPAA authorization is not necessary under emergency circumstances.<\/span><\/i><\/p>\n<p><b>Permitted Circumstances<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Covered entities can share the PHI of persons infected or exposed to the coronavirus disease under certain circumstances, such as:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">When the disclosure is necessary for providing treatment \u2013 You can disclose patient information to first responders, so they can provide emergency treatment to a COVID-19 patient.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">When it\u2019s required by law \u2013 You can notify public officials, if an individual under your care has tested positive to COVID-19, but only if the state law requires that you do so.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">When first responders may be at-risk of infection- You can disclose a patient\u2019s PHI to a first responder on duty, if they may have been exposed to COVID-19, or may be at risk of exposure to a person with COVID-19, while conducting an investigation or answering a call. However, the disclosure must be in line with the state laws.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">When the disclosure to the first responder can prevent or lessen a threat of COVID-19 infection \u2013 You can disclose the PHI to a first responder, if you believe that such a disclosure can protect the health and safety of an individual or the public.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">When the disclosure could help a prison or a law enforcement official having the custody of a person \u2013 You can share the PHI of COVID-19 infected (or suspected) inmate or a person if it\u2019s needed for:\u00a0<\/span>\n<ol>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Providing care.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Health and safety of others, including inmates and employees.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Maintaining the safety, security and good order of the correctional facility.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Law enforcement on the premises.<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p><b>Permitted Disclosures<\/b><\/p>\n<p><span style=\"font-weight: 400;\">In general, healthcare providers can disclose PHI under the following conditions. They can:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Disclose PHI when it\u2019s necessary to treat the patient or to treat another patient.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Disclose PHI to public health authorities and persons at risk of contracting or spreading the disease if authorized by law.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Disclose PHI \u2013 at the direction of a public health authority \u2013 to a foreign government agency.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Share the PHI with the patient\u2019s family, friends, and other persons who are involved in the care of the patient.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Share PHI with the person at risk of contracting or spreading the disease<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Share PHI with anyone in order to prevent or lesson a serious and imminent threat to public health and safety.\u00a0<\/span><\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p><b>Sharing Information with the CDC<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The HHS bulletin explicitly states that the covered entities can share <\/span><i><span style=\"font-weight: 400;\">necessary <\/span><\/i><span style=\"font-weight: 400;\">PHI with the public agencies, such as the Centers for Disease Control and Prevention (CDC) or state or local health authorities when the disclosure is expected to prevent or control the spread of disease. They can also share the PHI with disaster-relief organizations too.\u00a0<\/span><\/p>\n<p><b>Privacy restrictions and Patient rights<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Last week, <\/span><a href=\"https:\/\/www.hhs.gov\/about\/leadership\/secretary\/alex-m-azar\/index.html\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">Alex Azar<\/span><\/a><span style=\"font-weight: 400;\">, the US Secretary of the HHS declared further <\/span><a href=\"https:\/\/www.hhs.gov\/sites\/default\/files\/hipaa-and-covid-19-limited-hipaa-waiver-bulletin-508.pdf\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">relaxation to the HIPAA laws<\/span><\/a><span style=\"font-weight: 400;\">. The HHS has removed some provisions of the HIPAA law to ensure that hospitals can continue to attend to the coronavirus crisis without any hurdles. These waivers would allow patient information to be shared for treatment, including coordinated, public health activities, and for preventing or lesson a serious and imminent threat. The following provisions have been waived off. As per the waivers:\u00a0<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Patient\u2019s agreement is not required for speaking with their family members, relatives or friends involved in his or her care.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Providers are no longer required to honor a patient\u2019s request to opt out the facility directory.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">It is not compulsory to distribute a notice of privacy practices.<\/span><\/li>\n<\/ol>\n<p><b>The following patient rights have also been waived off<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Patient\u2019s right to request privacy restrictions.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Patient\u2019s right to request confidential communication.<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">For now, the waivers apply only to providers located in the emergency areas identified in the public health emergency declarations and to hospitals that have implemented disaster protocols for 72 hours.\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Besides these waivers, the HHS has stressed that during the coronavirus emergency patient health information can be shared for public health and safety. This includes the reporting of disease or injury and the reporting of vital injuries, such as birth and death; and conducting public health surveillance, investigation and intervention.\u00a0<\/span><\/p>\n<p><b>Minimum Necessary Rule<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The disclosures must still not violate the \u2018minimum necessary\u2019 rule of the healthcare law, unless required by law or necessary for patient treatment. The minimum necessary rule applies equally to all disclosures made under the coronavirus emergency. The healthcare providers must continue to make all reasonable effort to disclose only the minimum necessary information to accomplish the purpose of the disclosure.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Moreover, the PHI patient cannot be disclosed to media or persons not involved with the person\u2019s care without the permission from the patient.\u00a0<\/span><\/p>\n<p><b>Use of Telehealth communication tools\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The HHS has also declared that healthcare providers can <\/span><a href=\"https:\/\/www.hhs.gov\/hipaa\/for-professionals\/special-topics\/emergency-preparedness\/notification-enforcement-discretion-telehealth\/index.html\" rel=\"nofollow noopener\" target=\"_blank\"><span style=\"font-weight: 400;\">use telehealth communication tools<\/span><\/a><span style=\"font-weight: 400;\"> to provide healthcare services during this emergency. Healthcare providers can use any audio, video or chat tools to communicate with patients to assess, diagnose and treat them. The only exception is the use of public facing tools. You can use non-public facing tool only.\u00a0\u00a0<\/span><\/p>\n<p><b>Examples of non-public facing tools<\/b><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Apple Facetime<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Skype\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Microsoft Team<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Zoom\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Google Hangout\u00a0<\/span><\/li>\n<\/ul>\n<p><b>Examples of public facing tools\u00a0<\/b><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Facebook live<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Twitch<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">TikTok<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Instagram live<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">While the COVID-19 emergency continues, the HHS has promised to exercise discretion, and it will not impose non-compliance penalties. You can use any product that is available.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This would allow the healthcare provider to assess more patients without risking a spread of infection, and would help protect senior citizens by keeping them away from clinics and hospitals.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Are compliance restrictions hurting your practice? Are you aware of all the HIPAA waivers that apply to the COVID-19 healthcare emergency? Let us know in the comments section below; we\u2019d be happy to share your views with the US healthcare community.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As of yesterday evening, we have had 188,000 confirmed cases of COVID-19 infections spread across 50 states. An alarming number.\u00a0 The first against the coronavirus is now, in effect, a war against spreading infections and the mounting death toll. The infections are showing no signs of subsiding; New York alone has 76,000 cases. For California, [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":2776,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,138,140,9],"tags":[269,268,77],"class_list":["post-2775","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-education","category-elearning","category-empower","category-hipaa","tag-coronavirus","tag-covid-19","tag-hipaa"],"_links":{"self":[{"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/posts\/2775","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/comments?post=2775"}],"version-history":[{"count":0,"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/posts\/2775\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/media\/2776"}],"wp:attachment":[{"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/media?parent=2775"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/categories?post=2775"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/tags?post=2775"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}