top of page

A Brief Refresher on HIPAA's Privacy and Security

Updated: May 14, 2020

Privacy and security are important to both healthcare providers and their patients. There are many pieces and parts to US HIPAA regulations. At 365MBS we want to help. In order to keep your business and patients safe here is a brief refresher of what #HIPAA regulations do not allow.



8 Most Common HIPAA Violations

Number 1. Patients can revoke/set an expiration date for their authorizations. Failure to adhere to that date would be a violation of HIPAA.


Number 2. Any form in the patients file, without a patient’s signature is considered to be invalid.


Number 3. All patient documents must be shredded. Not doing so would be a violation of regulations. Documents that are not stored securely violate HIPAA regulations.


Number 4. Releasing information to an unauthorized party. Every #patient designates specific people to be able to have access to their information. Releasing information to the unauthorized party is a violation of HIPAA. This also includes releasing information that was not approved by the patient. Any information given to a third party is a violation of HIPAA regulations. Unless you have signed consent from the patient.


Number 5. #Employees cannot discuss with members of their family or friends about a patient's health records.


Number 6. Employees cannot talk about patient’s private health information over the phone or in public spaces where other people may hear.


Number 7. Employees cannot send patient’s private health information via email. Unless the email used is sent via secure access.


Number 8. Employees cannot release information about a minor without the consent of the parent or Legal #guardian.




We at 365MBS care about you and want to help you be successful. Do not hesitate to let us know how we can help move your practice forward.

29 views0 comments
bottom of page