When a patient refers another patient to our practice, is there a violation of HIPAA laws if we just sent them a thank you for entrusting them with their friend/family by referring them to our practice? Without mentioning names of course, just a general thank you. A colleague felt we were asking for trouble and inferring that we gave out the names. I wasn't so sure that it was a violation or that it would even be taken in a bad way. Obviously we are doing it in a favorable way... my question is 1) are we violating the law and 2) if not, is it a gray area?
Thanks

When a patient refers another patient to our practice, is there a violation of HIPAA laws if we just sent them a thank you for entrusting them with their friend/family by referring them to our practice? Without mentioning names of course, just a general thank you. A colleague felt we were asking for trouble and inferring that we gave out the names. I wasn't so sure that it was a violation or that it would even be taken in a bad way. Obviously we are doing it in a favorable way....my question is 1) are we violating the law and 2) if not, is it a gray area?
Thanks


I wouldn't do it - obviously patent #1 referred patient #2 and so #2 knows where #1 is treat but, still, I wouldn't do it.

Don't think it's a violation but think it could open the door to a problem - if you research "HIPAA" here you'll see the bizarre situations people have posted.