The coverage of healthcare providers is wide. People who are qualified and perform health services are considered healthcare providers. Healthcare providers may work in different area of health industry as different positions, and the HIPAA is somewhat complicated for providers to implement. However, there are some basic rules which are the same everywhere. First, providers should not disclosure patient’s health information to somebody without patients’ authorization, even that person is patient’s close family member or relative. Keep in mind that, patient always has the right to get a copy of his or her medical record by paper or electronic, and they can choose to share the health information to anyone. But, under the law, healthcare providers have to “obtain the individual’s written authorization for any use or disclosure of protected health information...authorization must be written in specific terms” (Summary of the HIPAA Privacy Rule, …show more content…
The document should include patient’s correct name, date of birth, social security number, which time of period is requested, or specifically the name of the test or procedure on certain date of service. Patient needs to sign on the release form, and the signature has to match the one that is written in the chart. Moreover, healthcare providers should better not to discuss patient’s condition or clinical information over the phone, except emergency. Sometimes, the family member will call the physician office and requests to speak to the doctor regarding the patient’s condition. The answer is no. The best way is, the family member comes with the patient and see the doctor together. Another rule of HIPAA, is “Limiting Uses and Disclosures to the Minimum Necessary” (Summary of the HIPAA Privacy Rule, 2014). It means that healthcare providers can only disclosure the part of medical record which is requested. Back to the above example of life insurance company requested record, if the company requests the records in 2008-2009, then provider cannot send the record before 2008, and/or after 2009; if the company requests the blood test result, provider cannot send the colonoscopy report for instead, or send two reports together as