Confidentiality, Privacy and Security

Accessing medical records of family members

  • 1.  Accessing medical records of family members

    Posted 16 days ago
    Does anyone have a policy that specifically list the family member which employees are not allowed to access? If so would you be willing to share this.

    ------------------------------
    Kristin Haley
    Health Information Manager
    ------------------------------


  • 2.  RE: Accessing medical records of family members

    Posted 16 days ago
    I'm not sure what you're asking. A policy that limits what employees can access in a family members records?

    --
    Thanks Kris

    Kris Lundell MBA,  CIPP/US, CiPT, CHP, CHPS, HCISPP
    Privacy and Security Consultants LLC





  • 3.  RE: Accessing medical records of family members

    Posted 16 days ago
    We are trying to create a policy that narrows down to a list of those medical records you can and cannot access. We are small clinic where some of our employees that are related in some what to our patient population. We understand that we shouldn't allow access to family member medical records but how far into the family tree should you go (i.e. aunts, uncles, cousins, and in-laws).

    ------------------------------
    Kristin Haley
    Health Information Manager
    ------------------------------



  • 4.  RE: Accessing medical records of family members

    Posted 14 days ago
    At a previous healthcare system,  we had a policy that you were not able to access any record that you didn't need in order to do your job.  We did have difficulty managing this policy with some of our rural clinics because often times employees had to be involved in the treatment of family members.

    ------------------------------
    DeAnn Tucker MHA, RHIA, CHPS, CCS
    Senior Manager | Coker Group
    ------------------------------



  • 5.  RE: Accessing medical records of family members

    Posted 16 days ago

    Our policy states:

     

    • Employees may not use the electronic record to review the Protected Health Information of their children, spouses, family members, or any other person for whom they may be the appointed personal representative or guardian. Such requests must be processed through the Release of Information Office in the HIM Department. With written authorization from the patient, personal representative, or guardian, you may receive copies.

     

    We do have some exceptions as we have small rural clinics where there might only be one RN, one Registration staff, etc. so in some cases  it is acceptable, as long as they stay within their role.

     

    Hope that helps!

    Becky

     

    Becky Kilen, MS, RHIA, CHPS

    GHS Privacy Officer | Manager of Privacy

     

    GUNDERSEN HEALTH SYSTEM 

    1900 South Avenue | Mail Stop:  AVS-001

    La Crosse, WI  54601

    Phone:  (608) 775-3549 | Fax:  (608) 775-4706

    rakilen@gundersenhealth.org

     

    Privacy Office: (608) 775-7439 | PrivacyOffice@gundersenhealth.org

     

    http://connect.gundluth.org/hipaa/home

     

     

    CONFIDENTIALITY NOTICE:

    This email message, including all attachments, is for the sole use of the intended recipient (s) and may contain confidential and privileged information. If you are not the intended recipient, you may NOT use, disclose, copy or disseminate this information. Please contact the sender by reply email immediately and destroy all copies of the original message including all attachments.

     






  • 6.  RE: Accessing medical records of family members

    Posted 16 days ago
    This is also a very key area to audit to identify unauthorized access to records.




    Posted: 7:58 AM AZ time

    ------------------------------
    Frank Ruelas
    Compliance Professional
    Arizona
    ------------------------------



  • 7.  RE: Accessing medical records of family members

    Posted 13 days ago
    We don't have a policy against accessing the medical record of a family member if you need this information to do your job. Our computer security agreement states that they are only allowed to use the system to perform their job duties. In New Hire Orientation I always tell them that the EHR is not for the own personal use, they may only use it to perform valid functions of their job. They need to sign up for the patient portal if they would like to access medical records online. I also explain that we audit 25 random users a month and we specifically look for any potential access breaches of family members and co-workers.

    ------------------------------
    Kathryn Wood, RHIA
    Assist Dir of Information Systems/Privacy Officer
    War Memorial Hospital
    ------------------------------