New grad and HIPAA question

I'm not sure I'll have to look into that! I know patients and families can set up HIPAA passwords that the nurse can ask for when someone calls. I just feel awkward when I answer the phone caught off guard by a family member (we use facility provided "cellphones" during our shifts meant for in hospital use only but sometimes the numbers get passed on to family members) and they ask "how's my mom doing today?" I don't want to come off rude but is it a violation by simply stating they had a good day, ate their whole lunch yada yada? General statements that aren't necessarily giving out any diagnostic or result specific information?

Cheerfully acknowledge that the pt is there and being well cared for. Let them know that Federal laws prevent you giving out details regarding their condition, but that the pt is 'doing well'. If the pt isn't doing well, suggest that they come visit, or contact whomever is a frequent visitor for more information. If the pt is alert, transfer the call to the pt.

Make sure you are sympathetic and concerned, without violating HIPAA. Be kind and understanding. Try not to let them rattle on too much regarding their own problems, but if you can glean more information regarding the pt, it might be useful and interesting.

Great! Thank you for your response!

You're by no means prohibited from giving information to family as a flat rule, you do need the patient's permission or permission of the patient's decision maker which usually isn't that hard to do. HIPAA doesn't say you can't give out information, it just tells you what you need to do before giving out information.

Thank you for spelling HIPAA correctly throughout this whole thread, everyone! :)

We have a password system, In order for us to give out information, pt (or POA for AMS) has to have a password. We also ask that one family member be the "go-to" person. I hate when 5 siblings call about mama. We also have phones in the room, so that resolves a lot of issues.

I guess this depends on where you are working. In psychiatry if the caller asks we don't even disclose whether someone is on the unit without consent.

Bingo.

Acknowledging even that someone is an inpatient is providing information that the general public does not know, so....TMI.

When I worked the floor, we had to be SO careful about telephone info.....it wasn't an uncommon thing to have a reporter call, claiming to be a relative, to get 'the scoop' on a public figure/celebrity in our care. If I didn't RECOGNIZE with 100% certainty, by voice, who I was speaking with (because I had been speaking to them often enough to KNOW the voice without a doubt), they got nothing from me. And *I* had never been called out for leaking info to the press

Other than knowing a family member by voice, passwords are GREAT :)

I know psych is a different category in terms of HIPAA, but I've read that on a "regular" unit (for lack of a better term) it isn't a violation to acknowledge that someone is a patient on the floor. Giving more information than that I can understand being a violation. Not sure if that's true or not now but just what I've heard. Thankfully I've never had someone call asking if so and so was a patient so I haven't had to deal with this issue.

Even acknowledging that the patient is there is a violation of HIPAA, regular floor or psych. You never know who is calling, just because he or she says who he/she is. All you can say is you can't give information to anyone about a patient (and they should know the system to get information, if they are allowed to get it).

As far as I know, the difference between HIPAA on psych vs. other floors is that the penalties for violating it are bigger on psych.

Patient consent often includes permission to list in hospital directory and acknowledge presence, condition, unit and/or room number. How many facilities get away is most don't read consents, but many are clear about opt in or out of patient directory. The fines are great for release of information regardless if med-surg or psych. I know because we opted my father's name out of the directory and enacted limited visitors ID required. Drove certain family members nuts but kept certain nosy others at bay. The form I signed on his behalf disclosed the applicable HIPAA rules. I think at one point having opt out only was acceptable but not any more. I know psych, substance abuse and other more sensitive areas you must sign to opt in or out, if not opt out is presumed.