HIPAA Violation???

She may have the resident's or family's permission, in which case this would not be a violation.

When I am 100 by all mean violate me with birthday cards!!!

Sure technically it probably is a H Violation, but good lord...the violated is celebrating thier 100th birthday and is getting birthday cards...really what harm is there in that request?

I would never have posted all that information, for my own protection. Im sure she meant well though. Im always scared to say anything, fearing I could get in trouble for HIPAA violation. Hopefully nothing but alot of cards will come of the post.

This is one of the ways we may end up "protecting" ourselves into sterile plastic cubicles where, in the name of staying "safe," we cut off every last speck of human interaction.

I hope kindness--and common sense--prevail in this case.

I work for an insurance company and we have had HIPAA training inside and out and yes, posting the woman's name, birthday AND address is a HUGE HIPAA violation since she is an employee at the nursing home this resident lives at.

Unless the resident had given written permission for this info to be posted, the person who posted it (without malice I am sure) could be in huge trouble. At the facilities in CT that I have been to, all residents have to sign a paper upon admission giving or not giving permission to post their birthdays on the bulletin boards, permission to let callers know of their residence there, etc.

Think about it, how much damage a ID thief could do with just that bit of info..would you want your name, birthdate and address posted on a website for anyone to see?

I understand that she probably did this in good faith, but to answer the question, yup big ol fat HIPAA violation.

It would be a HIPAA violation unless the PI (Patient Information) is being used for or in the process of "the delivery of treatment, payment or for operations" purposes.
and it is a violation as the information posted does identify this patient - - name, date of birth, address, social security, etc.

HIPAA no longer requires written consent. In fact, lack of objection can now be construed as consent. (read latest HIPAA updates). As long as the patient and/or family agreed to this there is no violation. Also name and address are publicly available info and since the facility is the patient's home it's not really PHI, just demographics. In the case of 100th birthdays, these are often publicized and as long as the patient has no objection, there should be no problem.
Obviously, SS#, dx, meds etc are always PHI, no matter what the setting.