HIPAA Guidelines for Patient Privacy

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) provides federal protection for a person's health information that is held by healthcare professionals such as doctors, dentists, and psychotherapists. HIPAA patient privacy rules govern the use and protection of medical data at health treatment centers such as hospitals, clinics and nursing homes.

What HIPAA Regulates

• HIPAA regulations are designed to protect patient security and confidentiality, while still allowing for the transfer of necessary information to healthcare providers and insurers.

Patient Protection Under HIPAA

• People over the age of 18 have the right to have their personal health information protected by all healthcare providers to whom they give information. Patients can give written permission to share their medical records with other health-related professionals and insurance companies.

Information Protected Under HIPAA

• The privacy rule is applicable to all electronic, written, and oral personal health information. The security rule specifically protects all personal health information stored in an electronic form. Special rules also govern a patient's mental health records during psychotherapy sessions.

How Patient Health Information Can Be Used Under HIPAA

• HIPAA regulates how and when personal health information should be disclosed. Information will usually be given through the patient's permission for the sake of treatment and billing for medical services received. Patient health information should always be given to the patient if requested. The patient's information can also be disclosed to the Department of Health and Human Services as part of an official investigation.