Confidentiality requires health care providers to keep a patient’s personal health information private unless consent to release the information is provided by the patient.
Email of patient informtion. The Health Insurance Portability and Accountability Act (HIPAA¾see www.hhs.gov/ocr/hipaa ) has codified the responsibility of health care providers. In HIPAA, "health care providers" include health plans, health care clearing-houses, and health care practitioners who electronically conduct financial and administrative transactions (eg, enrollment, billing, eligibility verification). Key provisions of HIPAA involve the following areas.
-
Access to medical records: Generally, patients should be able to see and obtain copies of their medical records and request corrections if they identify errors.
Notice of privacy practices: Health care providers must provide a notice about their possible uses of personal medical information and about patient rights under HIPAA regulations.
Limits on use of personal medical information: HIPAA limits how health care providers may use individually identifiable (protected) health information. The act does not restrict physicians, nurses, and other practitioners from sharing information needed to treat their patients. However, practitioners may use or share only the minimum amount of protected information needed for a particular purpose. In most situations, personal health information may not be used for purposes unrelated to health care. For example, a patient must sign a specific authorization before a health care provider can release medical information to a life insurer, a bank, a marketing firm, or another outside business for purposes unrelated to the patient's current health care needs.
Marketing: Marketing is communication designed to encourage people to purchase a particular product or service. HIPAA requires that the patient's specific authorization must be obtained before disclosing information for marketing. The health care practitioner must disclose any payments that will be received as a result of marketing. However, health care practitioners can freely communicate with patients about treatment options, products, and other health-related services, including disease-management programs.
Confidential communications: A patient can request that health care practitioners take reasonable steps to ensure that their communications with the patient are confidential. For example, patients could ask a physician to call their office rather than home. Nonetheless, unless the patient objects, practitioners can share medical information with a patient's immediate family members or someone known to be a close personal friend if the information relates directly to that person's involvement with the patient's care or payment for care. Practitioners are expected to exercise professional judgment.
For purposes of the privacy rule, an authorized personal representative of the patient (eg, a proxy appointed in a power of attorney for health care or a state-authorized decision-making surrogate) should be treated the same as the patient. Thus, the representative has the same access to information and may exercise the same rights regarding confidentiality of information. Nevertheless, practitioners may restrict information or access if there are reasonable concerns about domestic violence, abuse, or neglect by the representative.
Some communication cannot remain confidential. Health care practitioners are sometimes required by law to disclose certain information, usually because the condition may present a danger to other people. For example, certain infectious diseases (eg, HIV, syphilis, TB) must be reported to state or local public health agencies. Conditions that might seriously impair a patient's ability to drive, such as dementia or recent seizures, must be reported to the Department of Motor Vehicles in some states.
Complaints: Patients may file complaints about compliance with these privacy practices. Complaints can be made directly to the health care practitioner or to the Office for Civil Rights in the US Department of Health and Human Services. Patients do not have a right to file a private lawsuit under HIPAA. There are civil and criminal penalties for misuse of personal health information; however, such penalties should not worry health care practitioners who, in good faith, make reasonable attempts to comply.
eed to keep patients' medical information confidential. However, the Health Insurance Portability and Accountability Act (HIPAA¾see www.hhs.gov/ocr/hipaa) has codified the responsibility of health care providers. In HIPAA, "health care providers" include health plans, health care clearing-houses, and health care practitioners who electronically conduct financial and administrative transactions (eg, enrollment, billing, eligibility verification). Key provisions of HIPAA involve the following areas.
Access to medical records: Generally, patients should be able to see and obtain copies of their medical records and request corrections if they identify errors.
Notice of privacy practices: Health care providers must provide a notice about their possible uses of personal medical information and about patient rights under HIPAA regulations.
Limits on use of personal medical information: HIPAA limits how health care providers may use individually identifiable (protected) health information. The act does not restrict physicians, nurses, and other practitioners from sharing information needed to treat their patients. However, practitioners may use or share only the minimum amount of protected information needed for a particular purpose. In most situations, personal health information may not be used for purposes unrelated to health care. For example, a patient must sign a specific authorization before a health care provider can release medical information to a life insurer, a bank, a marketing firm, or another outside business for purposes unrelated to the patient's current health care needs.
Marketing: Marketing is communication designed to encourage people to purchase a particular product or service. HIPAA requires that the patient's specific authorization must be obtained before disclosing information for marketing. The health care practitioner must disclose any payments that will be received as a result of marketing. However, health care practitioners can freely communicate with patients about treatment options, products, and other health-related services, including disease-management programs.
Confidential communications: A patient can request that health care practitioners take reasonable steps to ensure that their communications with the patient are confidential. For example, patients could ask a physician to call their office rather than home. Nonetheless, unless the patient objects, practitioners can share medical information with a patient's immediate family members or someone known to be a close personal friend if the information relates directly to that person's involvement with the patient's care or payment for care. Practitioners are expected to exercise professional judgment.
For purposes of the privacy rule, an authorized personal representative of the patient (eg, a proxy appointed in a power of attorney for health care or a state-authorized decision-making surrogate) should be treated the same as the patient. Thus, the representative has the same access to information and may exercise the same rights regarding confidentiality of information. Nevertheless, practitioners may restrict information or access if there are reasonable concerns about domestic violence, abuse, or neglect by the representative.
Some communication cannot remain confidential. Health care practitioners are sometimes required by law to disclose certain information, usually because the condition may present a danger to other people. For example, certain infectious diseases (eg, HIV, syphilis, TB) must be reported to state or local public health agencies. Conditions that might seriously impair a patient's ability to drive, such as dementia or recent seizures, must be reported to the Department of Motor Vehicles in some states.
Complaints: Patients may file complaints about compliance with these privacy practices. Complaints can be made directly to the health care practitioner or to the Office for Civil Rights in the US Department of Health and Human Services. Patients do not have a right to file a private lawsuit under HIPAA. There are civil and criminal penalties for misuse of personal health information; however, such penalties should not worry health care practitioners who, in good faith, make reasonable attempts to comply.
Do not tell anyone how your patient is doing unless he or she is directly involved with care and needs to know or is an authorized family member. If a colleague asks about a friend who happens to be your patient, refuse to answer.
-
Break confidentiality only in the following situations:
-
The patient asks you to do so.
-
Child abuse is suspected.
-
The courts mandate you to tell.
-
You have a duty to protect life. (If the patient says that he or she is going to kill someone or him- or herself, tell the intended victim and the authorities.)
-
The patient has a reportable disease. You must report it to the authorities. They will deal with it.
-
The patient is a danger to others. If the patient is blind or has seizures, let the proper authorities know so they can take away the patient's license to drive. If the patient is an airplane pilot and a paranoid, hallucinating schizophrenic, authorities need to know.
-
Ethical health care has always included the need to keep patients' medical information confidential.
In the United States, the Health Insurance Portability and Accountability Act (HIPAA¾see www.hhs.gov/ocr/hipaa ) has codified the responsibility of health care providers. In HIPAA, "health care providers" include health plans, health care clearing-houses, and health care practitioners who electronically conduct financial and administrative transactions (eg, enrollment, billing, eligibility verification).
Key provisions of HIPAA involve the following areas.
Privacy
Complaints: Patients may file complaints about compliance with these privacy practices. Complaints can be made directly to the health care practitioner or to the Office for Civil Rights in the US Department of Health and Human Services. Patients do not have a right to file a private lawsuit under HIPAA. There are civil and criminal penalties for misuse of personal health information; however, such penalties should not worry health care practitioners who, in good faith, make reasonable attempts to comply.
A DNR order does not mean "do not treat." Rather, it means only that CPR will not be done. Other treatments (eg, antibiotic therapy, transfusions, dialysis, use of a ventilator) that may prolong life can still be provided. CPR itself usually does not result in long-term, neurologically intact survival, but other treatments, including aggressive or critical care that prevents cardiac arrest, can. Thus, whether to pursue other treatments is a more important decision than whether to resuscitate. A person with a DNR order can still be treated aggressively in an intensive care unit if their condition warrants.
- Clinical vs Legal Incapacity
- Informed Consent
- Confidentiality and HIPAA
- Medical Malpractice
- Advance Directives
Consent of the patient is a prerequisite for any medical intervention.
However, that consent often does not need to be expressed.
For emergency care, consent is normally presumed.
For interventions considered routine and unlikely to cause harm (eg, routine phlebotomy, placement of an IV line), circumstances are typically considered to imply consent. For example, by holding out their arm, patients are presumed to indicate consent to receive certain routine interventions.
For more invasive or risky interventions, express informed consent is always required.
Full disclosure
Ethical and legal authorities generally agree that health care practitioners are obligated to ensure, at a minimum, that patients understand:
· Their current medical status, including its likely course if no treatment is pursued
· Potentially helpful treatments, including a description and explanation of potential risks and benefits
· Usually, the practitioner's professional opinion as to the best alternative
· Uncertainties associated with each of these elements
Consent and Surrogate Decision Making
![[Preview]](http://online.statref.com/Images/view12.gif)
Study Questions
Case 24-4
A 15-year-old girl comes into your office asking for birth control. She admits that her parents do not know that she is sexually active, and she implores you not tell them.
1
What should you do?
Write the prescription and agree not to tell her parents but discuss the risks and benefits of using oral contraceptives with the patient. You should also encourage the patient to communicate with her parents.
2
What are the rules regarding parental consent for minors?
Parental consent is required for minors under the age of 18, unless the minor is emancipated (married, self-supporting, or in the military). There are, however, several situations in which parental consent is not required. These situations include emergencies, prescription of oral contraceptives, pregnancy-related medical care, and treatment of sexually transmitted diseases (STDs) or drug problems.
▪
Parental consent must be obtained unless the minor is emancipated.
▪
Exceptions to this rule include emergency situations, drug abuse, pregnancy-related medical care, prescription of oral contraceptives, or treatment of sexually transmitted diseases (STDs).
Summary box: consent for minors
Content 2
Content 3
![[Preview]](http://online.statref.com/Images/view12.gif)
1. http://www.nejm.org/doi/full/10.1056/NEJMra1108646?query=TOC#t=article
2. https://depts.washington.edu/bioethx/topics/confiden.html
1. http://www.nejm.org/doi/full/10.1056/NEJMra1108646?query=TOC#t=article