Does the HIPAA Privacy Rule require that a health care provider document a patient’s expressed preference not to have the provider discuss the details of her health care with her family?
How can a covered entity determine whether a person is a family member, or person involved in an individual’s care prior to death, for purposes of sharing protected health information about the decedent after death?
If an individual instructs a covered health care provider that he does not want the provider to discuss his medical conditions or treatment with his family members, can the covered entity share such information with family members after the individual has died?
Does the HIPAA Privacy Rule permit a covered entity to disclose protected health information about a decedent to family members or other persons involved in the care of the decedent?
Since the HIPAA Privacy Rule protects a decedent’s health information only for 50 years following the individual’s death, does my family health history recorded in my medical record lose protection when it involves family members who have been deceased for more than 50 years?
Since the HIPAA Privacy Rule protects a decedent’s health information for 50 years following the individual’s death, am I required to keep the decedent’s information for that period of time?
Do the HIPAA Privacy Rule protections apply to the health information of deceased individuals?
How can family members of a deceased individual obtain the deceased individual’s protected health information that is relevant to their own health care?
May a covered entity hire a business associate to create a limited data set, and may the public health authority be a business associate for that purpose, even if the public health authority is also the intended recipient of the limited data set?
I want to hire the intended recipient of a limited data set to also create the limited data set as my business associate. Can I combine the data and use agreement and business associate contract?