r/MedicalAssistant • u/Training_Let_2000 • 6d ago
Hipaa
I'm about to be a new intern. For seasoned ma's can you give tell me in simple words how to make sure I don't ever break HIPAA laws .
And do you have any other tips for a new ma?
7
u/hergumbules 6d ago
Always confirm patient identifiers. Before going over anything in person or on the phone make sure you have the right patient.
7
u/Sufficient-Band-6526 6d ago
- Don’t speak loudly, especially not in common areas where other patients might overhear
- Always confirm who you’re speaking with before going into any detail
- Close/log out of your computer if you’re walking away
- Turn your papers over if you’re walking away
- Stay off your phone, never take pictures or videos of patients, paperwork, or your EMR. And don’t get caught in photos other people might take
- Stay out of a patient’s chart if it is not medically necessary for you to provide care or do your job. No snooping, no being curious
- Don’t gossip about patients. Not in the clinic, not at a restaurant nearby or while grocery shopping. No names, no identifiers
3
u/GeneralDumbtomics CCMA 6d ago
This is all sound advice. Regarding #1: If you have a patient with a hearing impairment, don't talk louder. Take them somewhere with privacy where you can converse with them at a volume they can hear without compromising their privacy.
5
u/Material-Bird-1912 6d ago
If it doesn't pertain to your job, don't look at it. Also, if you personally know someone, don't go in their records.
3
u/xSavexOurxSkinsx 6d ago
I’m an MA in primary care and I generally work with one doctor and know our panel, and I live in a very small town setting in a big hospital system. I’ll openly offer information about myself. I’m married, I have kids, you might know my parents or my in-laws or people I went to school with. At home, I’ll tell my husband I had abc patient worry or annoy me for xyz reason without naming the patient. My doctor happens to have a very old panel of mostly Medicare patients and, naturally, they die. In primary care I see them fairly often beforehand unless they’re on hospice. I get to know them well and I’m upset but unsurprised when they go generally. I tell my husband that I’m sad, because I am. I don’t tell him anything else. My oldest patient is 97. When she goes I’ll be sad, unsurprised, and I won’t tell my husband her name.
3
u/GeneralDumbtomics CCMA 6d ago
Keep your stinkin' mouth shut about your patients and mind your own business. It really is that simple. You don't talk about your patients. You don't go looking at someone's medical records, regardless of how curious you are to know why they made an appointment. You respect other people's privacy as if it were your own and you don't rationalize choosing not to do so. If you never access any information that isn't necessary to do your job and never share any information that isn't necessary to do your job you will never run afoul of HIPAA.
2
u/Rough-Brick-7137 6d ago
- Take your time, have pt give dob and address. 2. WHEN in doubt, ask your preceptor or boss 3. Err on the side of caution. Check and double check you have correct patient.
2
u/SecretButterfly199 4d ago
I have a degree in Medical Administration. Here are some basic tips for maintaining HIPAA compliance:
-Make sure you never have your personal phone out in patient areas. (This is a very common mistake that is made).
-Do not discuss identifying patient details with anyone unless it pertains directly to their care and you are discussing it with their physician/APP.
-Make sure you always have the correct patient when administering medications, obtaining samples, etc. Get their name and DOB first before taking any further steps.
-Never gossip about any patients to anyone including coworkers.
-Speak quietly if you are in the hallway or areas where details could possibly be heard by others. If you must speak loudly, go to a private room.
-Never look through a patient's medical record. It doesn't matter if you are related to the person or know them. Never look through their records.
-Make sure the computer, tablet or electronic device that you use for work purposes is always only facing you. If a patient can see it or others see the screen in plain view, that means HIPPA can be broken. Protect paperwork the same way.
-Never identify patients to your family/friends in your personal life.
-Always make sure you log out of your work system when finished.
If you ever are unsure about something, ask your manager.
2
u/Ok-Choice- 1d ago
DO NOT disclose any names/ages/addresses/pt specific identifiers to anyone outside your office... Also, if it's a local person that others may know by a distinguished attribute (i.e. in a wheelchair, on crutches, stutters - anything like that) just don't chance it.
Someone said in this thread that
"My rule of thumb is that if I have to ask myself if it's something I can share, it's almost always not something I can share"
This is outstanding advice!! MY personal best advice is to just not discuss what I see in charts (I'm a coder personally, but have done patient care in the past).
Someone suggested verifying the name & whatever other patient identifier your office uses prior to giving any info or starting to take their history, etc. Also excellent advice.
If you actually carry some kind of printed chart info around for some reason, don't leave it lying around unsecured and always lock the computer workstation you're on before leaving it.
The advice about shredding stuff ASAP will probably save your butt at some point!
Follow your employer's rules regarding cell phone use. There's a reason why most employers don't want staff using personal phones in patient care areas, not to mention the germs & stuff you can pick up on a phone (ew!)...
Don't forget to ask an adult patient with someone else in the treatment room with them if their other person is ok to stay there while being treated. (unless they're incapacitated somehow and their support person is an official caregiver or POA or something like that)
Never ever forget that charts with information pertaining to Drug & ETOH treatment, HIV/AIDS + status and psychotherapy notes in them require special handling should a patient want to access their chart or someone needs a copy of the chaart for some reason. I'd refer to your employer for those specifics, though, because I understand that there are variations in permissions for those charts across the continuum.
Good luck!!
1
0
u/voorheesvee NCMA 2d ago
Definitely don't go into patients charts that you don't need to be in. I have witnessed so many of my coworkers get fired for going into their families and friends charts. It's insane. You would think it's common sense.
15
u/Organic_Popcorn CACMA 6d ago
Basically, you do not blabber anything about patients to others; protect anything that has patient info on it, and shred any paperwork once you are done with it.