A HIPAA violation refers to the failure to comply with HIPAA rules, which can include unauthorized access, use, or disclosure of Protected Health Information (PHI), failure to provide patients with access to their PHI, lack of safeguards to protect PHI, failure to conduct regular risk assessments, or insufficient ...
While the consequences of accidentally sending confidential information may vary depending on the organization, disciplinary actions can range from re-training of the employee to suspension or even termination, depending on the severity of the breach and the organization's policies.
The only times a psychologist would break confidentiality are in the event of threats of harm to self or other; reports that a child (under 18 years of age) or an elder (60 years and older) is being abused or neglected in some way; or if there is a subpoena or court order.
Questions or complaints relating to HIPAA should be directed to the U.S. Dept. of Health and Human Services (HHS), Office of Civil Rights (OCR). The federal policies for HIPAA can be found on their website: Health Information Privacy: General information relating to HIPAA.
By mail + If you would like to submit a health care complaint by mail, please contact the Health Care Helpline at (888) 830-6277 for assistance.
Massachusetts law (Chapter 112) and Federal law (45 CFR; HIPAA, 1996) require that you are advised regarding how personal information about you may be used and disclosed and how you can get access to this information.
Questions or complaints relating to HIPAA should be directed to the U.S. Dept. of Health and Human Services (HHS), Office of Civil Rights (OCR). The federal policies for HIPAA can be found on their website: Health Information Privacy: General information relating to HIPAA.
Covered entities (anyone providing treatment, payment, and operations in healthcare) and business associates (anyone who has access to patient information and provides support in treatment, payment, or operations) must meet HIPAA Compliance.
The SANE and/or medical provider must obtain informed consent from the patient for the physical exam and evidence collection.
The Massachusetts privacy act requires that “every person that owns or licenses personal information about a resident of the Commonwealth must develop, implement, and maintain a comprehensive information security program”.