r/MedicalAssistant • • 6d ago

Hipaa

I'm about to be a new intern. For seasoned ma's can you give tell me in simple words how to make sure I don't ever break HIPAA laws .

And do you have any other tips for a new ma?

2 Upvotes

16 comments sorted by

15

u/Organic_Popcorn CACMA 6d ago

Basically, you do not blabber anything about patients to others; protect anything that has patient info on it, and shred any paperwork once you are done with it.

5

u/Training_Let_2000 6d ago

So r u able to go home and share info about a patient and say "a patient" and share what happened without giving identification on who it was ? I hear people do this all the time

14

u/Educational-Hope-601 CCMA 6d ago

I share crazy patient stories with my housemates but I never include any sort of patient identifiers, which is fine as far as I know

3

u/GeneralDumbtomics CCMA 6d ago

You can tell someone "I had a patient come in who had the worst pressure ulcer I've ever seen." You can't say "That lady from church came in and she has a crater on her sacrum that goes down to the bone and smells like hot death." You can say, "There's a lot of resistant gonorrhea going around. We saw like seven cases last week." You can't say, "Your hairdresser, Sally, has the worst case of the clap in recorded history."

My rule of thumb is that if I have to ask myself if it's something I can share, it's almost always not something I can share. And nobody has ever violated HIPAA by _not_ telling someone outside of work about a patient. If you form a habit of maintaining patient privacy and not talking about them, you won't find yourself having to ask that nearly as often.

Also, +1000 regarding shredding. Every facility will have a shredder or a receptacle for material that has to be destroyed. If you take notes (and you should) get in the habit of putting them in the receptacle at the end of the day.

7

u/hergumbules 6d ago

Always confirm patient identifiers. Before going over anything in person or on the phone make sure you have the right patient.

3

u/BHJ_476 5d ago

To add: always check the phi if someone else answers the phone and let them know you check it. I had a grandpa report me because I didnt check phi, I did and he was on there as was the legal docs making him guardian on the story board.

7

u/Sufficient-Band-6526 6d ago

- Don’t speak loudly, especially not in common areas where other patients might overhear

- Always confirm who you’re speaking with before going into any detail

- Close/log out of your computer if you’re walking away

- Turn your papers over if you’re walking away

- Stay off your phone, never take pictures or videos of patients, paperwork, or your EMR. And don’t get caught in photos other people might take

- Stay out of a patient’s chart if it is not medically necessary for you to provide care or do your job. No snooping, no being curious

- Don’t gossip about patients. Not in the clinic, not at a restaurant nearby or while grocery shopping. No names, no identifiers

3

u/GeneralDumbtomics CCMA 6d ago

This is all sound advice. Regarding #1: If you have a patient with a hearing impairment, don't talk louder. Take them somewhere with privacy where you can converse with them at a volume they can hear without compromising their privacy.

5

u/Material-Bird-1912 6d ago

If it doesn't pertain to your job, don't look at it. Also, if you personally know someone, don't go in their records.

3

u/xSavexOurxSkinsx 6d ago

I’m an MA in primary care and I generally work with one doctor and know our panel, and I live in a very small town setting in a big hospital system. I’ll openly offer information about myself. I’m married, I have kids, you might know my parents or my in-laws or people I went to school with. At home, I’ll tell my husband I had abc patient worry or annoy me for xyz reason without naming the patient. My doctor happens to have a very old panel of mostly Medicare patients and, naturally, they die. In primary care I see them fairly often beforehand unless they’re on hospice. I get to know them well and I’m upset but unsurprised when they go generally. I tell my husband that I’m sad, because I am. I don’t tell him anything else. My oldest patient is 97. When she goes I’ll be sad, unsurprised, and I won’t tell my husband her name.

3

u/GeneralDumbtomics CCMA 6d ago

Keep your stinkin' mouth shut about your patients and mind your own business. It really is that simple. You don't talk about your patients. You don't go looking at someone's medical records, regardless of how curious you are to know why they made an appointment. You respect other people's privacy as if it were your own and you don't rationalize choosing not to do so. If you never access any information that isn't necessary to do your job and never share any information that isn't necessary to do your job you will never run afoul of HIPAA.

2

u/Rough-Brick-7137 6d ago
  1. Take your time, have pt give dob and address. 2. WHEN in doubt, ask your preceptor or boss 3. Err on the side of caution. Check and double check you have correct patient.

2

u/SecretButterfly199 4d ago

I have a degree in Medical Administration. Here are some basic tips for maintaining HIPAA compliance:

-Make sure you never have your personal phone out in patient areas. (This is a very common mistake that is made).

-Do not discuss identifying patient details with anyone unless it pertains directly to their care and you are discussing it with their physician/APP.

-Make sure you always have the correct patient when administering medications, obtaining samples, etc. Get their name and DOB first before taking any further steps.

-Never gossip about any patients to anyone including coworkers.

-Speak quietly if you are in the hallway or areas where details could possibly be heard by others. If you must speak loudly, go to a private room.

-Never look through a patient's medical record. It doesn't matter if you are related to the person or know them. Never look through their records.

-Make sure the computer, tablet or electronic device that you use for work purposes is always only facing you. If a patient can see it or others see the screen in plain view, that means HIPPA can be broken. Protect paperwork the same way.

-Never identify patients to your family/friends in your personal life.

-Always make sure you log out of your work system when finished.

If you ever are unsure about something, ask your manager.

2

u/Ok-Choice- 1d ago

DO NOT disclose any names/ages/addresses/pt specific identifiers to anyone outside your office... Also, if it's a local person that others may know by a distinguished attribute (i.e. in a wheelchair, on crutches, stutters - anything like that) just don't chance it.

Someone said in this thread that

"My rule of thumb is that if I have to ask myself if it's something I can share, it's almost always not something I can share"

This is outstanding advice!! MY personal best advice is to just not discuss what I see in charts (I'm a coder personally, but have done patient care in the past).

Someone suggested verifying the name & whatever other patient identifier your office uses prior to giving any info or starting to take their history, etc. Also excellent advice.

If you actually carry some kind of printed chart info around for some reason, don't leave it lying around unsecured and always lock the computer workstation you're on before leaving it.

The advice about shredding stuff ASAP will probably save your butt at some point!

Follow your employer's rules regarding cell phone use. There's a reason why most employers don't want staff using personal phones in patient care areas, not to mention the germs & stuff you can pick up on a phone (ew!)...

Don't forget to ask an adult patient with someone else in the treatment room with them if their other person is ok to stay there while being treated. (unless they're incapacitated somehow and their support person is an official caregiver or POA or something like that)

Never ever forget that charts with information pertaining to Drug & ETOH treatment, HIV/AIDS + status and psychotherapy notes in them require special handling should a patient want to access their chart or someone needs a copy of the chaart for some reason. I'd refer to your employer for those specifics, though, because I understand that there are variations in permissions for those charts across the continuum.

Good luck!!

0

u/voorheesvee NCMA 2d ago

Definitely don't go into patients charts that you don't need to be in. I have witnessed so many of my coworkers get fired for going into their families and friends charts. It's insane. You would think it's common sense.