HIPAA violation vs. Course Syllabus

[mitch0310]

I am currently taking a Mental Health Nursing class, post-level 1, pre-level 2 (summer curriculum).

One of my assignments received a 0 because the syllabus stated "HIPAA - Use of patient identifiers in any assignment will result in a "zero" for the assignment with possible dismissal from the program."

The assignment was: a description of the events according to the rubric that occurred during my clinical time and a self-reflection on said clinical time.

I received a 0 because I used the first names (patient identifiers) of patients in the assignment ---> no last names nor clinical sight was mentioned, and no other patient identifiers were used.

Despite the fact I broke the syllabus rules, does this count as a violation of HIPAA (especially since this counts as a communication between healthcare providers)? And if so, can anyone point to a clause in HIPAA that specifically points out why why this is a violation?

P. S. The document was submitted electronically, so does that have an affect on the HIPAA rules&regulations?

[michiganstudent]

I just took my HIPAA certification last night so I will be allowed to start clinicals. Yes- I believe it is a violation. You are not allowed to use any demographic information that could identify the patient. It doesn't matter that it was "between healthcare providers". If they were not directly involved in the care of those patients, it is a violation of "need to know".

[HouTx, BSN, MSN, EdD]

PP is correct. Communication of PHI between healthcare providers is limited to "need to know" among people who need the information to provide care for that patient. This assignment does not meet the criteria at all. In the future, if you are faced with this type of assignment, just substitute "Mr X" or something similar and you won't have a problem.