3 ms·
Why do the paper thin walls between exam rooms at my doctor's office that allow me to hear entire conversations while I am waiting (and waiting) not violate HIP
by vidanay 3y ago
Why do the paper thin walls between exam rooms at my doctor's office that allow me to hear entire conversations while I am waiting (and waiting) not violate HIPAA?
- burnte 3y agoReasonable precautions. I've been top IT management in healthcare for 8 years, I'm very well versed with this concept. HIPAA isn't "PHI is Eyes Only Secret!" it's "you have to take reasonable precautions to safeguard data from bad actors." I have a wall between the rooms, each room has doors, and when the doc is talking with you, you can't hear a lot from the next room over. We don't have to make walls soundproof and doors sealing airlocks.
- supertrope 3y agoClinics that deal with the most sensitive medical needs tend to be more careful. HIV testing, reproductive health, psychiatry, hospice.
- NoZebra120vClip 3y ago[flagged]
- dang 3y agoPosting like this will get you banned again. No more of it please, regardless of how right you are or feel you are. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- anderiv 3y agoThis was not a productive, nor necessary comment. Please retract it and take it elsewhere. It has no place on HN.
- NoZebra120vClip 3y ago[flagged]
- anderiv 3y agoI did use it. From the HN Guidelines: “Please don't use Hacker News for political or ideological battle. That tramples curiosity.” You indeed have the right to your opinions. That does not mean that HN must accept and provide a venue for them. Good luck to you.
- NoZebra120vClip 3y ago[flagged]
- anderiv 3y ago[flagged]
- owenmarshall 3y agoYou missed one of the biggest, one so important it has its own, separate, overriding privacy law: Substance use disorders. (Though perhaps you can argue it’s in psychiatry!) Addiction treatment falls under 42 CFR II, colloquially known as “part 2”[0] Part 2 data is significantly more encumbered than other medical data. If I want to get it I need to be explicitly allowed as a named entity by the patient to receive it. If the data is shared with me under a “general designation”whoever gave it to me has to record that and tell the patient on request. And I have no TPO carve outs, I have to get explicit consent to pass it along. It is, often times, treated as radioactive data - my company deals in medical data but explicitly says in our contracts that we refuse any receipt of it. 0: https://www.ecfr.gov/current/title-42/chapter-I/subchapter-A/part-2 https://www.ecfr.gov/current/title-42/chapter-I/subchapter-A...