Quote from hartse
I have been accused of a HIPPA violation at work because I copied a page out of a log to support a statement I am writing.
A legal document, for administrative filing(i.e., "event" reporting, audit trace, shift discrepancies, etc..), would allow use of otherwise "controlled" information, just as a Police report would. Please note that duty rosters, med receiving/unit
dispensation logs, and information relating to the operation of the unit do not fall under HIPAA, if they do not list PHI(and PHI is not employee's names).
I live alone and will not share the log with anyone else. The HR manager also has forgotten that I have an email from her asking me if I wished to have copies of emails to keep for any future occasion.
Email may or may not be HIPAA controlled. If it contains PHI, and is unencrypted
, it is a violation.
No PHI, no violation.
I did not take anything from a patients chart and am not being given the opportunity to complete the statement at work. Is this still a HIPPA violation?
If you are not being allowed to complete a report relating to work at
work, then employer may be reportable for violation of reporting practices, depending on exactly what you are documenting. Bear in mind, internal memos/documentation may be covered under the facility's Employee Handbook confidentiality/disclosure section, but that is generally not HIPAA related (though there may occasionally be overlap).