Medicare HIPAA Rules

The Health Insurance Portability and Accountability Act (HIPAA) was enacted in 1996. It was initiated for a number of reasons, including to protect all health information of a patient. In 2000, it was amended to ensure that electronic records are covered by the law. Any health care information maintained by providers, health care clearinghouses or health plans must be protected under HIPAA.

Patient Rights

• Under HIPAA regulations, the patient has specific rights regarding personal health information. A patient has the right to view or amend his information if he has concerns regarding accuracy. A patient can request a list of all agencies that have received her personal health information, and may specify how she prefers for her information to be shared. A patient also has the right to have personal health information sent to any location he wishes, not just his home address.

Medicare Dissemination

• Medicare must follow specific HIPAA guidelines regulating how patient information is utilized. Medicare can share or utilize patient information with such entities as federal/state agencies that receive payments, public health departments, federal/state investigative departments, judicial/administrative departments or law enforcement.

  Medicare also reserves the right to use personal health information of a patient if there is a immediate danger to the patient or others. Otherwise, outside organizations or persons may receive a patient's information only with the approval of the patient.