I have a Facebook page and one of my "friends" on the page is a midwife and every time she delivers a baby she puts the baby's full name and it's birth statistics on her Facebook page. Isn't this a HIPAA violation?

Thank you,
Lisa

HI Lisa,
She may think she's doing something nice for the new parents, however, it is a direct violation of HIPAA, if she is not the biological parent of every child she discuses or does not have a signed, witnessed R.O.I form (Release of Information) she is most certainly violating the core of what HIPAA stands for. They protect discuses right to privacy, she is opening up their privacy like it's show and tell time. She needs to button her lip and stop telling private,privileged information that is not hers to share. If she is an employee she may find herself out of a job real soon. A violation of privacy could lead to harm for the people whose lives are being openly discussed. HIPAA was enacted for a reason. Privacy must adhered to, and all patients that require medical help need to feel secure their medical needs, treatments, or conversations are not shared with anyone who cares to hear about it. SSSSSSSSSHHHHHHHHHH is the best policy

Even those whom do not work directly in the hospital or doc's office are still bound to uphold the same standard of privacy. At my job we have coders at home, They must still keep all medical records confidential from their hubby, kids and even sweet ol aunt fran. Privacy is a standard, it must not be altered.

Do you have direct knowledge that the midwife does not have permission to release the info?

Do you have direct knowledge that the midwife does not have permission to release the info?

Yes, I do have direct knowledge that she does not have a release form.

This is a direct violation of HIPAA if the midwife has not been given express permission via FOIA (Freedom of Information Act) by every patient. As a nurse myself, working now in different departments of the hospital, I am not even allowed to divulge which area I work in on any particular night. I'm not giving out any patient info, but it is still considered a HIPAA violation.

Yes, I do have direct knowledge that she does not have a release form.


Then it's a reportable violation.