Important changes set for patient privacy policies

A significant change is being made to an organizational policy regarding patient privacy.

“Privacy, Confidentiality & Security of Patient and Proprietary Information,” ensures that the organization is compliant with the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Beginning July 1, it will no longer allow individuals with One Chart logins to access their own medical records through One Chart.

“It has come to our attention that the Office for Civil Rights disapproves of this type of self-access,” said Debra Bishop, privacy officer. “We’ve determined that because nothing in the regulation permits it, self-access should no longer be allowed. We have updated the policy accordingly.”

Moving forward, personal health records can be accessed in two ways:

According to the 6045 policy, unless you have a current job-related need, you may not access any family member’s medical record including your spouse, parents, child, etc. This is regardless of age, and even with written permission. If a family member wants you to review his/her records, there are two options. The patient may provide you proxy access to his/her online patient portal account or may request a copy of records from HIM to share with you.

As a reminder, electronic medical records are audited and violations of patient privacy are detected automatically as they occur. Violations result in corrective action, up to and including termination.

Questions? Contact the Privacy Office.