3 ms·

But that's illegal...

• angersock 11y ago
  Well, yes and no and yes and no. HIPAA doesn't actually protect you as much as you'd think--for example everyone who is signed on as a business partner (and similarly HIPAA qualified) can, if memory serves, view records.
  • karmajunkie 11y ago
    They can, but they are similarly bound to have audit records of access, restrict access to only those with a business need to the information, and most importantly, BA's have a duty to notify of a breech. Prior to HITECH it was only the provider who was obligated to notify of a breech—business associates could do pretty much whatever they wanted as far as CMS was concerned, though the data sharing agreements oftentimes had more teeth to them than HIPAA itself.
    • odonnellryan 11y ago
      Yes, "bound." However those things are never really checked.
      • karmajunkie 11y ago
        Seeing as how I'm the guy that used to do the checking, I humbly disagree.