I just received a request from I doctor I have never met asking me to participate in a research study. The doctor does work in the same office as a doctor I have seen in the past but I have not seen that doctor for about two years. The envelope contained the necessary medical records release forms to sign and a questionnaire if I wished to participate. The cover letter also listed my medical condition and naturally the envelope contained my name and address.
Although this letter did reach me, I could just as easily have moved and not given the doctor a new address or not leave any forwarding address. (Even if someone fills out a forwarding address card with the post office, these eventually expire.) In these cases the new occupant at my old address could easily have opened the letter and know my name and medical condition. Was sending this letter containing my medical information (without my requesting it), a violation of HIPAA? If it wasn’t a violation of HIPAA, is there a way to stop this from happening again?
Thanks, HS