Question

There are many aspects of HIPAA that patients do not see. One thing they do see, however, is the Notice of Privacy Practices (NPP) when it is presented to them. Some covered entities realize the importance of the NPP, but others do not. Metropolitan Family Medical Practice (MFMP) believes that the NPP is a waste of time, money, and effort. The office manager believes that patients don’t read it or keep it when it is given to them. As such, MFMP has discontinued the practice of providing it to patients or updating it.

Is this a HIPAA violation with respect to every patient who seeks services at MFMP on a given day? Why or why not?

Is it a HIPAA violation with respect to telephone consultations (that is, where a patient is not seen face-to-face by a provider at MFMP?) Why or why not?

The office manager does keep a copy of the NPP posted near the front door and has posted a copy on the organization’s website. Is this adequate to maintain HIPAA compliance?

Copies of the NPP are maintained in a drawer and given to patients who specifically request a copy. Is this adequate to maintain HIPAA compliance?

What do you foresee as long-term consequences if MFMP continues its practice of not providing NPPs to its patients?

Answer 1

HIPAA privacy rule needs health plan and health care providers covered to develop a notice about health information.

If MFMP does not provide these notices to their patients,it can be called as HIPAA violation.As per HIPAA rules it is their responsibilty to safeguard the information.

The telephonic consultations may also cause misuse of information.it will be considered as hipaa violation.

copies of NPP should be protected as it contains PHI

It is even important to acknowledge the persons who is requesting for a copy.It will be helpful to maintain HIPAAcompliance.

It is patient's right to get their information and also the information to be protected.As long as MFMP continues its practice of not providing NPPs to its patients,it has to take responsibilty to their actions.