What is HIPAA?
HIPAA (the Health Insurance Portability and Accountability Act) is a federal law that helps protect you and your family's private health data and ability to have health Insurance.
What does HIPAA do?
-
HIPAA (along with other federal laws such as the Affordable Care Act) says that:
Your medical records must be kept private. This includes printed records, computer records, and anything said at your health provider’s office. There must be uniform national coding standards for electronically storing and sending health care information.
-
HIPAA also says that your insurance company may not deny you coverage because of a medical problem you had treated in the past. Must not discriminate against you or your family because of your current health. Must allow you to renew your health coverage after you lose your job.
Yes. In fact, Texas has two laws that seek to protect Texans’ privacy: The Texas Medical Records Privacy Act, and the Texas Identity Theft Enforcement and Protection Act.
First, like HIPAA, Texas law uses broadly defined terms to make the rules applicable to anyone that creates, receives, obtains, maintains, uses, or transmits protected health information. “Covered entities” cannot use personal health information (sometimes called “PHI”) for any reason other than for providing treatment or for securing payment, or for insurance purposes. Otherwise, the covered entity must get written permission from the individual before it can release personal health information.
Texas law also seeks to protect “sensitive personal information” (such as your name when combined with a Social Security number, a driver’s license number (or government ID number), or a credit card or debit card number. Businesses must implement and maintain reasonable procedures to protect the information, and prevent unauthorized disclosures.
The term “covered entity” includes insurance companies, Medicare, Medicaid, employers, schools, government agencies, healthcare providers, and businesses that handle healthcare information.
Does Texas have a HIPAA-like law?
What do the Texas privacy laws do?
What is a “covered entity”?
How does HIPAA protect my privacy?
HIPAA protects all information that could be used to identify you (i.e., your PHI), including:
-
Past, present, or future health
-
Health care or treatment
-
Payment for your health care.
Yes. HIPAA set up new rules to protect your health information. These rules are called “Standards for Privacy of Individually Identifiable Health Information.” They apply to any person or group in the nation who handles your health records (“covered entities”), including:
-
Health insurance companies
-
Healthcare clearinghouses (like medical billing service companies) that process information they get from other health sources
-
Health care providers
Unless you give your permission, your providers, insurance company, and any other company that handles your information must not share it.
This includes all of your health information, whether it is on paper, sent electronically, or spoken.
Yes. Your doctor or health insurance company can share your private health information (PHI) without your permission for:
-
Treatment and healthcare
-
Payment
-
Public health reasons
-
Certain kinds of research
For example, your doctor can share your PHI with the hospital where you will have surgery, a specialist who will treat you, or in order to get paid for your care. But your doctor cannot give your PHI to a life insurance company unless you give specific written permission.
When your PHI is shared, only the minimum amount of information should be shared. Ask your doctor what information was shared and how it will be used.
Yes, but only if you give written permission. Here are some examples:
-
You can appoint someone, such as the person who is your power of attorney for health care, to see your records if needed.
-
You can allow someone to pick up your prescriptions at the drug store.
-
If you are a parent, you can see your child’s medical records, unless your child has consented to care that does not require your permission.
Are my health records and information private?
Are there exceptions to the privacy rule?
Can anyone else see my health information?
Can I see my medical records or get copies of them?
Yes. Texas law says you can see and copy your records. And if you find mistakes, you can ask to have them fixed.
It is a crime to violate your privacy. You can file a complaint with the U. S. Department of Health and Human Services, Office of Civil Rights (OCR) by mail, fax, or email. If you need help filing a complaint or have a question about the complaint form, please visit the OCR website at How to File a Civil Rights Complaint | Guidance Portal (hhs.gov) or the OCR toll-free number: 800-368-1019.
HIPAA protects information relating to reproductive healthcare. The federal Privacy Rule does not prevent disclosures that are expressly required by state law. However, the Privacy Rule says that covered entities should disclose only the information relevant to the specific requirements of the state law.
Disclosures that do not meet the “required by law” definition in HIPAA rules or that exceed what is required by state law, do not qualify as permissible disclosures.
The Privacy Rule’s permission to disclose PHI without an individual’s authorization is limited to “a mandate contained in law that compels an entity to make a use or disclosure of PHI and that is enforceable in a court of law.”
Current Texas law prohibits almost all abortion procedures. Texas law also requires doctors to submit reports to the state detailing specific information about abortions that they do perform. However, the physician reports cannot identify the patient by any means. If you would like more information on HIPAA and privacy rights surrounding reproductive healthcare, you can visit the federal Health and Human Services website at HIPAA and Reproductive Health | HHS.gov.
This is a rapidly changing area of law. Consult an attorney if you need specific legal advice.
No. HIPAA’s rules limited the insurance company’s ability to limit coverage because of “preexisting conditions.” Those rules were essentially superseded (and improved) by the Affordable Care Act. Under current federal law, unless you purchased your insurance before 2010, the insurance company is prohibited from using a “preexisting condition” to deny coverage. If you have had a condition (like asthma, diabetes, or cancer) the insurance company generally cannot deny coverage, charge you more, or limit benefits based on your preexisting condition.