When it comes to protecting patient information, it’s about getting employees to understand how to best protect it and what to do if there is a data breach. Training is essential and should include not only administrative employees, like medical office specialist, but also doctors, nurses, and other clinicians throughout the organization. All employees with access to patient information need to have the understanding of how to maintain security protocols when it comes to patient care. Many clinicians tend to look at PHI breaches as simply an IT issue. However, any breach of trust can seriously hamper a doctor’s ability to deliver proper health care services. Always remember, as medical office specialist, you are always the front liner in your practice. You are probably the first person a patient encounters during a visit, friendly and always with a smile, and whom the patient is expected to confide and always assure the patient’s trust to protect individual privacy. Discuss what is required to disclose patient information to family members, friends, and when ordered by courts or government entities. A physician can only disclose his or her patient’s personal health information: • when he or she has the patient’s or substitute decision-maker’s consent and it is necessary for a lawful purpose; • where it is permitted under the legislation, without the patient’s or substitute decision-maker’s consent; or • where it is required by law. Generally, physicians need express or implied consent before disclosing personal health information. Physicians, however, are entitled to assume that they have the patient’s implied consent for the purposes of providing or assisting in providing health care, unless the physician disclosing the information is aware that the patient has expressly withheld or withdrawn consent. This means that, without reason to believe otherwise, physicians can share information with others involved within the patient’s circle of care8 without asking for the patient’s consent. The patient’s express consent is required for providing his or her personal health information outside of the circle of care, except where otherwise directed by statute. Disclosure to a Family Member or Friend Situations may arise where physicians are asked by a family member or friend about the condition …show more content…
In this situation, the physician has to exercise caution and to use their best judgment when providing information. Discussions with friends and family ought to be limited to basic information about the patient’s general state of health.
Summonses, Subpoenas and Court Orders
In the course of litigation, physicians may be required by a summons, subpoena or a court order to disclose a patient’s personal health information and patient records. The physician should read the summons, subpoena or court order carefully and not do more than it requires. For example, a summons may require a physician to attend a court at a particular time and to take a specific patient chart. The summons does not authorize the physician to discuss the patient’s care with, or show the record to, anyone in advance of the court appearance.
Disclosure to Police
It is not mandatory for physicians to provide confidential material to the police in the absence of a legal obligation. At these times, the general rules regarding consent and disclosure apply, meaning that express consent, either from the patient directly, or the substitute decision-maker, will be required before the police are provided with personal health