Using Last Name Only- HIPAA Violation???

[WyldCat]

I work in an OR and have to submit a report to my purchasing department when we re-order lens implants which have been implanted into a patient. When I supply the lens info to purchasing I include the patient's last name only so we will know that patients lens has been re-ordered. This was set up by purchasing and has been done this way for 3 - 4 years.

I have now been reported to my compliance department (by purchasing!!) for including information which can identify the patient! I do not include anything more than the last name and so therefore they have no idea exactly who that patient is. I have to go back to my surgery log and compare to that day's surgery schedule for me to even find their full name!!

I have searched the web for a couple of hours now & have not been able to find any rules saying last names can or cannot be used in an instance such as this.

Please let me know if you know of any or if you think this is an violation.

Thanks!

[KneKno]

I don't know the "rules" for your question, but could you bypass the problem by using the patient's med record number or facility account number? I work in a hospital, and the med rec number is used for chart audits, etc.

[Whispera, MSN, RN]

I don't see how you violated confidentiality since both you and the purchasing department are in the business of providing a service to the client, and they do need to know who to bill!

[caliotter3]

I don't see how you violated confidentiality since both you and the purchasing department are in the business of providing a service to the client, and they do need to know who to bill!

This is your answer.

[CathyLew]

yea, I have to agree....the purchasing dept is in the hospital is it not...and I would think they were subject to the same confidentiality laws that everyone that works in a hospital agrees to. I think Hippa has been taken way to far, and has/is actually hurting the consumer.