Our hospice is moving to EMR and the facilities are given access to our pt electronic chart (until full implementation we print and fax ALL clinical notes from RN, LCSW, and SCP). I feel this could open us up for a HIPAA violation. I could be completely wrong, but the following just doesn't sound like we are protecting our pt's FAMILY (as hospice, our care is for the whole family, not just the patient).
I have a pt that has a dx process that the spouse could no longer manage at home. This is a young pt. This pt also has a young child. The pt was moved to an ALF very recently.
My concerns:
Child has a volunteer from our hospice, that volunteers for HIM, not pt
Social Work and Spiritual Care will split their visits between pt, spouse, and child.
All notes from these disciplines are "available" for the facility to look at through EMR.
I find that this violates the family's HIPAA rights to their privacy of issues they may be working through, whether d/t pt condition or other issues.
For example: let's just pretend...(seriously)
Spouse confides in social worker that he had multiple affairs during his marriage and he is struggling with it....or...he has met someone new now that spouse is in facility...or...he is suicidal....or he has found out he has been diagnosed with (anything).
Son confides in social worker or volunteer that he is being bullied at school, or that he became sexually active, or that he smoked pot...
(seriously, I made all these examples up)
What business is that of the facility? How will that help them accomplish caring for this pt that needs their skilled services?
In my opinion, it violates the family's right to privacy and their right to protected health information. I was told today that the facility should be getting all notes from all disciplines. Because I feel so strongly that I feel the facility has no right to read these notes as it does not help them provide care to the hospice patient but allows them to read the "novel" of the family.
Please let me know what the rule is on this. I would like to make sure I am following HIPAA and that my company is too.