Health Insurance Portability and Accountability Act of 1996 (HIPAA)

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law that required the creation of national standards to protect sensitive patient health information.


Healthcare providers, health plans, health care clearinghouses and business associates are required to follow this privacy rule standard, where the use and disclosure of a patient/client’s protected health information (PHI) cannot be done without the patient’s consent or knowledge. 

A major goal of the Privacy Rule is to ensure that individuals’ health information is properly protected. To ensure the confidentiality, integrity, and availability of all electronic protected health information,

while allowing the flow of health information needed to provide and promote high quality health care and to protect the public’s health and well-being. The Privacy Rule strikes a balance that permits important uses of information while protecting the privacy of people who seek care and healing.

 

However, it is important to note that the above-mentioned entities can disclose protected health information without a patient/clients consent or knowledge for the following purposes/situations:

  1. Treatment, payment of treatment and healthcare operations

  2. When required by law

  3. Evidence or report of abuse and neglect

  4. Judicial and administrative proceedings

  5. Functions such as the identification of a deceased person

  6. Workers’ compensation

  7. To prevent or lessen a serious threat to health or safety – When a therapist determines or pursuant to the standards of the mental health profession should determine that their patient/client presents as a danger to another person, the therapist incurs an obligation to use reasonable care to protect the intended victim against such danger. This is also known as “duty to warn”

To learn more visit:
HIPPA