3 ms·
To me, the most surprising thing—and that it isn’t garnering more attention—is that the initial determination is that the relevant medical records and billing a
by halostatue 2y ago
To me, the most surprising thing—and that it isn’t garnering more attention—is that the initial determination is that the relevant medical records and billing are reviewed by nurses in the Phillipines.
I’m sure they’re competent, but that sending these records to a foreign location where HIPAA does not exist is a matter of course should have people up in arms.
- ceejayoz 2y agoHIPAA does permit this (https://www.hhs.gov/hipaa/for-professionals/faq/2083/do-the-hipaa-rules-allow-a-covered-entity-or-business-associate-to-use-a-csp-that-stores-ephi-on-servers-outside-of-the-united-states/index.html https://www.hhs.gov/hipaa/for-professionals/faq/2083/do-the-...) if a BAA is in place. (I think it's probably a bad practice, but it's a legal one.)
- halostatue 2y agoI figured it did and should have been clearer that I believe it to be an ethical problem, because groups like Cigna are masters of finding just the level of unethical that they can perpetrate without crossing the line to illegal, most of the time.