Thread by @MarilynHeineMD

1/ Take care to not run afoul of #HIPAA. Lest you risk penalties and jeopardize the patient-physician relationship.

“Protecting information gathered in association with the care of the patient is a core value in health care.” tinyurl.com/45rk8hr4 ama-assn.org/practice-manag…

2/ The Code of Medical #Ethics also states, “However, respecting patient #privacy in other forms is also fundamental, as an expression of respect for patient autonomy and a prerequisite for trust.”

3/ Physicians and hospitals may share patient information without explicit patient consent for treatment, payment, business operations.

@HHSOCR enforces #HIPAA. Voluntary compliance and corrective action without a fine is a goal, but penalties are steep for “willful neglect.”

4/ Entities that knowingly obtain or disclose individually identifiable health information in ways not permitted by #HIPAA may face a fine of up to $50,000, as well as imprisonment up to one year.

ama-assn.org/practice-manag…

5/ Conditions where patient jeopardy is higher necessitate #privacy protections stronger than #HIPAA.

Persons w/#SUD risk loss of job, housing, custody, & insurance if the diagnosis is shared. Potential exposure deters treatment. Greater confidentiality safeguards are warranted.

6/ Under #HIPAA, physicians are required to provide patients with access to their information. Last year, @HHSOCR launched its Right of Access Initiative.

To help physicians better understand these obligations, #OurAMA has released a playbook: 

ama-assn.org/system/files/2…

7/ “Without appropriate safeguards, patients’ data could become a commodity. Health data can provide a wealth of information for marketers or be sold and exchanged by data brokers—impacting insurance coverage, access to care, or resulting in employment discrimination.” | #OurAMA

8/ To guide policymakers and other entities, @AmerMedicalAssn has developed a health #data #privacy framework:

tinyurl.com/yebusu46