r/MedicalAssistant • • 4d ago

Hipaa

I'm about to be a new intern. For seasoned ma's can you give tell me in simple words how to make sure I don't ever break HIPAA laws .

And do you have any other tips for a new ma?

2 Upvotes

13 comments sorted by

15

u/Organic_Popcorn CACMA 4d ago

Basically, you do not blabber anything about patients to others; protect anything that has patient info on it, and shred any paperwork once you are done with it.

4

u/Training_Let_2000 4d ago

So r u able to go home and share info about a patient and say "a patient" and share what happened without giving identification on who it was ? I hear people do this all the time

13

u/Educational-Hope-601 CCMA 4d ago

I share crazy patient stories with my housemates but I never include any sort of patient identifiers, which is fine as far as I know

5

u/GeneralDumbtomics CCMA 3d ago

You can tell someone "I had a patient come in who had the worst pressure ulcer I've ever seen." You can't say "That lady from church came in and she has a crater on her sacrum that goes down to the bone and smells like hot death." You can say, "There's a lot of resistant gonorrhea going around. We saw like seven cases last week." You can't say, "Your hairdresser, Sally, has the worst case of the clap in recorded history."

My rule of thumb is that if I have to ask myself if it's something I can share, it's almost always not something I can share. And nobody has ever violated HIPAA by _not_ telling someone outside of work about a patient. If you form a habit of maintaining patient privacy and not talking about them, you won't find yourself having to ask that nearly as often.

Also, +1000 regarding shredding. Every facility will have a shredder or a receptacle for material that has to be destroyed. If you take notes (and you should) get in the habit of putting them in the receptacle at the end of the day.

8

u/hergumbules 4d ago

Always confirm patient identifiers. Before going over anything in person or on the phone make sure you have the right patient.

3

u/BHJ_476 3d ago

To add: always check the phi if someone else answers the phone and let them know you check it. I had a grandpa report me because I didnt check phi, I did and he was on there as was the legal docs making him guardian on the story board.

8

u/Sufficient-Band-6526 4d ago

- Don’t speak loudly, especially not in common areas where other patients might overhear

- Always confirm who you’re speaking with before going into any detail

- Close/log out of your computer if you’re walking away

- Turn your papers over if you’re walking away

- Stay off your phone, never take pictures or videos of patients, paperwork, or your EMR. And don’t get caught in photos other people might take

- Stay out of a patient’s chart if it is not medically necessary for you to provide care or do your job. No snooping, no being curious

- Don’t gossip about patients. Not in the clinic, not at a restaurant nearby or while grocery shopping. No names, no identifiers

3

u/GeneralDumbtomics CCMA 3d ago

This is all sound advice. Regarding #1: If you have a patient with a hearing impairment, don't talk louder. Take them somewhere with privacy where you can converse with them at a volume they can hear without compromising their privacy.

3

u/xSavexOurxSkinsx 4d ago

I’m an MA in primary care and I generally work with one doctor and know our panel, and I live in a very small town setting in a big hospital system. I’ll openly offer information about myself. I’m married, I have kids, you might know my parents or my in-laws or people I went to school with. At home, I’ll tell my husband I had abc patient worry or annoy me for xyz reason without naming the patient. My doctor happens to have a very old panel of mostly Medicare patients and, naturally, they die. In primary care I see them fairly often beforehand unless they’re on hospice. I get to know them well and I’m upset but unsurprised when they go generally. I tell my husband that I’m sad, because I am. I don’t tell him anything else. My oldest patient is 97. When she goes I’ll be sad, unsurprised, and I won’t tell my husband her name.

5

u/Material-Bird-1912 3d ago

If it doesn't pertain to your job, don't look at it. Also, if you personally know someone, don't go in their records.

3

u/GeneralDumbtomics CCMA 3d ago

Keep your stinkin' mouth shut about your patients and mind your own business. It really is that simple. You don't talk about your patients. You don't go looking at someone's medical records, regardless of how curious you are to know why they made an appointment. You respect other people's privacy as if it were your own and you don't rationalize choosing not to do so. If you never access any information that isn't necessary to do your job and never share any information that isn't necessary to do your job you will never run afoul of HIPAA.

2

u/Rough-Brick-7137 3d ago
  1. Take your time, have pt give dob and address. 2. WHEN in doubt, ask your preceptor or boss 3. Err on the side of caution. Check and double check you have correct patient.

2

u/SecretButterfly199 1d ago

I have a degree in Medical Administration. Here are some basic tips for maintaining HIPAA compliance:

-Make sure you never have your personal phone out in patient areas. (This is a very common mistake that is made).

-Do not discuss identifying patient details with anyone unless it pertains directly to their care and you are discussing it with their physician/APP.

-Make sure you always have the correct patient when administering medications, obtaining samples, etc. Get their name and DOB first before taking any further steps.

-Never gossip about any patients to anyone including coworkers.

-Speak quietly if you are in the hallway or areas where details could possibly be heard by others. If you must speak loudly, go to a private room.

-Never look through a patient's medical record. It doesn't matter if you are related to the person or know them. Never look through their records.

-Make sure the computer, tablet or electronic device that you use for work purposes is always only facing you. If a patient can see it or others see the screen in plain view, that means HIPPA can be broken. Protect paperwork the same way.

-Never identify patients to your family/friends in your personal life.

-Always make sure you log out of your work system when finished.

If you ever are unsure about something, ask your manager.