PHI To Third Parties: What HIPAA Actually Allows
A hospital employee in Texas forwarded a patient's lab results to a family member who called and asked nicely. No written authorization. No
A collection of 32 posts
A hospital employee in Texas forwarded a patient's lab results to a family member who called and asked nicely. No written authorization. No
A hospital in Texas released three years of a patient's psychotherapy notes to an employer — based on a form the patient had signed
A paralegal calls your office on a Tuesday afternoon. She says she's sending over a subpoena for a patient's medical records
A Missing Signature Cost One Hospital $865,000 In 2019, a patient at a mid-size medical center in the Southeast requested her records be sent
A physician's office in Connecticut handed every new patient a single sheet of paper labeled "HIPAA Form" at the front desk.
A hospital in Texas faxed 277 patient records to the wrong physician's office. No authorization on file. No tracking log. No documentation that
A surgeon's office in Texas faxed a patient's entire psychiatric history to a life insurance company. The patient hadn't
The Hurricane That Exposed a Hospital's HIPAA Blind Spot In the aftermath of Hurricane Katrina, hospitals across the Gulf Coast scrambled to reunite
The Form That Stops Lawsuits — or Starts Them A surgeon's office in Texas faxed a patient's psychiatric records to an employer.
The Hurricane That Exposed More Than a Hospital's Roof In 2017, Hurricane Harvey flooded a major Texas hospital system. Staff scrambled to evacuate
A psychiatrist's office in Connecticut faxed 65 pages of therapy notes to a patient's employer. The patient had signed a form
In 2023, a mid-size hospital system in the Southeast received a corrective action mandate from OCR after routinely using an outdated, overly broad release form
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.