The Health Insurance Portability and Accountability Act (HIPAA) regulations can be confusing and sometimes misunderstood. There is a difference in what you are allowed to access in your role as a health care professional\/employee versus what you may access in your role as a parent, family member, or neighbor.<\/p>\n
As a health care professional and\/or employee, you have access to information that you need to know to perform your job and care for your patients. In general, this means that with or without the patient\u2019s authorization, you may do the following:<\/p>\n
Actions such as those above are defined under HIPAA as \u201cpurposes of treatment, payment, or operations (TPO).\u201d TPO means activities that you are performing as part of your job at Cooper or as a professional treating provider. Unless you are accessing the patient\u2019s medical record as part of your Cooper job responsibilities, you are not accessing the record for purposes of treatment.<\/p>\n
A HIPAA violation occurs when an employee, contractor, vendor, student, etc., (physician or otherwise) accesses the medical record of any individual that is not related to the performance of the employees job responsibilities and\/or TPO unless<\/strong> Cooper has a signed, written authorization from the patient authorizing the employee or physician to allow access to their medical record.<\/p>\n The following outline summarizes acceptable and unacceptable conduct consistent with Cooper policy and HIPAA requirements and the disciplinary process that will follow unacceptable conduct. This outline applies to all employees including physicians:<\/p>\n Acceptable <\/strong>(assuming there is no malicious intent and the access falls outside of TPO):<\/strong><\/p>\n Unacceptable<\/strong><\/p>\n Accessing the medical record of adult family members living with you without a signed written authorization:<\/p>\n Accessing the medical record of your own minor family member outside of payment, treatment, and operations over the age of 12*:<\/p>\n Accessing the medical records of any patient, minor or adult, outside of TPO without a signed written authorization:<\/p>\n Cooper reserves the right to vary the discipline outlined above based on the existence of mitigating or aggravating circumstances.<\/p>\n These requirements and limits apply to all Cooper personnel and medical staff members. If you have questions, please call Cooper\u2019s Privacy Officer, Phil Curran, at 856.361.1697 or email privacyofficer@cooperhealth.edu.<\/p>\n *Under NJ law, minors are treated as adults for the purpose of consent to treatment in certain areas, including pregnancy, venereal disease, HIV, drug and alcohol dependency, and treatment in connection with a sexual assault. Since Epic does not provide a mechanism to limit access to these protected areas, the expectation is that the employee will communicate with Health Information Management (HIM) to obtain the medical record so that HIM will have the opportunity to redact any information protected by the statutory prerogatives for a minor\u2019s consent to care.<\/p>\n","protected":false},"excerpt":{"rendered":"\n
\n
\n
\n