HIPAA Implications of Flagging Patient Records
Identification of AIDS Status Through Medical Alert Systems
Dentist Revises Process to Safeguard Medical Alert Protected Health Information
Overview
A recent investigation by the Office for Civil Rights (OCR) involving a dental practice’s patient-record flagging process highlights a potential HIPAA violation. OCR confirmed allegations that the practice marked certain physical medical records with a red sticker labeled “AIDS” on the outside cover. Because the records were handled in a way that allowed other patients and staff without a need to know to see the sticker, the practice potentially disclosed patients’ AIDS status within the office setting.
Corrective Action
After being notified of the OCR complaint, the dental practice immediately removed the red “AIDS” sticker from the complainant’s file. To resolve the matter, OCR also required the practice to revise its policies and operating procedures and to relocate medical alert stickers to the inside cover of patient records. In addition, the covered entity’s Privacy Officer and other representatives met with the patient to apologize and followed up with a written apology.
Key Lesson
The key lesson is that special medical alerts should not be placed on the outside of physical patient records. This practice is especially risky in a dental office, where the typical layout may allow other patients to visually identify information on a chart. If a patient is escorted by staff and seen by others, an outside chart label may be connected to that individual. This creates a significant risk of violating HIPAA and other laws protecting against disclosure of a person’s AIDS status.
Stark Law, Anti- Kickback Statute, M S O Structures, Telehealth, Physician Compensation, and Ancillary Services Recent False Claims Act Cases in the Health Care Industry: Key Takeaways for Providers Navigating False Claims Act Liability and Damages— The Importance of Compliance Programs for Healthcare Providers F D A Guidelines on A I Technologies in Medical Devices Agency Law Considerations for A I in Healthcare
