For the few Ebola cases in the USA, there has been up to the minute news coverage of the patient’s condition. Doesn’t this violate a whole bunch of federal laws? I know that keeping medical data secure and confidential is an industry unto itself.
Good question. I wonder if the patients have voluntarily given up their privacy rights for some reason.
Relevant excerpt:
Journalists are not covered entities, though. Maybe the CDC or local medical personnel need to be more tight-lipped about these things. But it’s possible the patients involved just signed away their rights. To make money, or to get their 15 minutes, or in pursuit of the greater good, or out of plain ignorance that they could refuse to do so.
Or desire to be helpful to the public.
I thought HIPPA applied to healthcare providers, not other people. So the sources the journalists use may well have been in violation, but the reporters are not.
Yep, this is a big part of the answer. People who learn this information as part of providing medical care (and that includes public health agencies) cannot disclose private health information (PHI). But journalists, friends, family, and coworkers have no such restrictions and that’s where many of the names came from.
Also, I feel confident that several of the patient did give consent to have their names and health status disclosed. Any time you hear a medical person refer to someone by name, they are either violating HIPAA or the person has given consent. Just going by the patients at Emory, Kent Brantley gave permission to use his name, so the doctors referred to him by name in press conferences. Nancy Writebol did not give this permission, so the doctors always referred to her as “the patient” even though her name was known in the press. The third patient also remained “the patient” because he has chosen to remain anonymous.
When there is a public health situation that is important to the public, it’s permissib;le to give the information as long as the patient’s name is protected. Because protecting the patient’s name is very difficult, the default is to keep all information confidential, period, but Ebola information is an exception where the public does have a need to know.
HIPPA is sort of a joke, it seems super serious on paper but in reality it is often ignored.
I remember my mom sending me for her paper prescriptions, me just walking in to a doctor’s office where my mom had NOT called in or authorized anything.
“Yes sir?”
“Uh hi I am Grude’s mom’s son”
“Oh ok she sent you to get her prescriptions, here you go!”
*Me mentally going er HIPPA?!
I can remember a ton of other situations that let me know HIPPA is a total joke.
No, it is no exception at all. A disease has no rights to privacy, but people do. If health care workers are releasing patient names they are in violation unless the patient has waived their rights.
But there are so many other ways that the information could get out. Police reports, airline rosters, family, friends, neighbors, …
Kudos to the OP for spelling HIPAA right! Otherwise, I think Boyo Jim is probably correct as to how the info gets out most of the time.
I’m sure that - as they have been mostly healthcare professionals - the victims whose names have been in the press gave explicit permission for their personal health information to be shared. They probably know their rights under HIPAA pretty well, given their line of work. And while the public may have a right to information about location, movements and date of contagiousness, they never have a right to names, addresses, or other personally identifiable PHI or PII.
If I get Ebola, how much can I expect heath care workers to offer me to grant them permission to release my name? $50,000? $100,000? $1M? More? No specific cash payment but a guarantee of lifetime free care?
That’s not a HIPAA violation. You said who the patient was, not the pharmacist.
I’m not convinced that it’s not a HIPAA concern. True, Grude was the one who mentioned the patient first, but the pharmacist revealed what the prescriptions were for (drug name, dosage, physician name, etc.), since that information goes on the bottle. Did you just say that you were there to pick up her prescriptions, or did you read off every prescription to the pharmacist before they confirmed that they had a matching one? If you didn’t, that could represent a security hole. How did the pharmacist not know that you weren’t really estranged from your mother and trying to discover what she was taking in order to do Something Nefarious ™ with that knowledge, like blackmail her or use it in a smear campaign? “Don’t vote for my mom, she takes glorpholine, which can cause brief episodes of psychosis and is also made from the bodies of dead kittens!”
Publicpanic is a bigproblem in the modernworld. I guess we can hope that newresearch and betterhygiene can help build a world that is free of deadlydisease.
I don’t think it’s a HIPAA violation. HIPAA allows for professional judgement more than most people think, and people who are obviously part of the patient care team (like someone who picks up prescriptions for the patient) are allowed the release of the information they need to provide that care without written consent, or even explicit verbal consent. HIPAA doesn’t require us to get it right, just to take measures to protect personal health information. He knew the right doctor’s office to go to, the receptionist knew someone was going to pick up her prescriptions that day, he provided her name…it’s reasonable to assume he was part of her patient care team. I might have asked for her birthdate or address to have 2 identifiers confirmed, but that’s out of an abundance of caution. (And also wouldn’t thwart the hypothetical nefarious son.)
A news organization may make such an offer, but I can’t imagine a health-care provider doing so. Maybe a huge health insurer or a drug manufacturer.
Brantly, Pham, and Vinson (and eventually Spencer) should be happy to have their names public, though. Brantly has already made at least one compensated television (Dateline, IIRC). All of them will have many media opportunities available to them over the coming years.
Is it wrong that I miss studying German for the grammar?