We have a payment dispute with our provider which has been ongoing and unresolved. I have been working the issue with the insurance plan. My situation is this-- The provider left a message with the person who answers phones at my husband's work that we "owe them money," when I called the provider to find out what was going on I then asked the person to tell me what address is on file for us (so she could send me a copy of something); she promptly read our current address off to me. I provided no identifying information other than "I am John Doe's wife, Jane." Two questions: 1) can the provider tell an employer or otherwise non-authorized person that we owe them money (in their eyes) and 2) can the provider disclose an address to an un-verified person? Should I report these to HHS? I am really upset that perhaps this provider is sharing more than my address with people. Any help would be appreciated!!

Well, financial info is not a HIPAA violation. HIPAA concerns medical info and even if it's a medical bill, that technically has no bearing under those laws.

Providers cannot tell anyone what you owe besides a collection agency. They have no reason and no rights to tell your employeer that information. Though, if they did it may be hard to prove and you can't account for rules (even if they have a company policy in place, you'll always get a bad apple of an employee).

I can't really help you with much more. Honestly, in your position I would call management at your provider and share your concerns. You can simply state that you realize there are on-going issues, but you would like to be assured that you have their confidentiality. (consider tape-recording any conversations or putting it in writing)

Thank you for your insight!