I work in a physician office. Our physicians want to sublease some office space to another physician practice. This arrangement calls for both practices to share some areas including the front desk/medical records office. I'm concerned that we will not be able to adequately safeguard our patients' protected health information (PHI) since the incoming practice will have access to our computers and medical record - it's physically impossible to separate the two offices check-in and check-out areas and medical records storage. Additionally, it will not be possible for personnel from either office to have a confidential conversation with the patient - either in person or via phone while in this area. I'm concerned that we'll be violating HIPAA Privacy and Security rules if we follow through with this arrangement. Is this a valid concern?

I see no issue, many offices share office spaces, and normally one medical professional can discuss a medical case with another medical professoinal without any permission from the person being treated. They may want to sign some joint agreement on security of records