I work in a copy room, I do copy medical records. Right now, there is just me & I have a door that locks, so I can control who comes in when I am printing medical records. In a few months, the copy room will be moved into the mail room, the mail room is not secure, outside vendors come in for pick up & delivery, Employees wonder in & out to get supplies, mail packages, etc. My concern is violating HIPAA laws. My supervisor says no, but it just doesn't seem right to me that anyone at anytime can see what I am copying or scanning. I've tried calling HHS, but all they have is recorded messages, no live person to talk to.

It is normal to have copies and other things in places like the mail room. I would also assume all of the employees are trained in HIPAA and are told not to tell others about medical things going on.

Next "you called HHS" that if of course your company finds out, can be your job, they will not say it was for that, they will just find another reason. You can question thiis to your supervisor or to the person in charge of HIPAA and its training at your company

Next besides vendors, UPS, USPS, Fedex, what other vendors, and you can keep what you copy from being just laying around. Or in your specific area.

I am glad you are worried, but you are getting way to far out on this one. I locked room, you don't really lock yourself in to make copies do you?

I completely agree with Fr_Chuck here. You are asking for trouble making an issue of this. You asked your supervisor. That's all you need to do. From here on out it's on your supervisor's shoulders.

Just don't let any paranoid nut-case patients into the mailroom and you should be all right. Delivery persons aren't likely to give a tinker's dam about the records, and if you do see them looking at what you are copying that would be the time to politely tell them to mind their own business.

I worked in a medical billing company and our copiers were in the main office where everyone is, none were in a separate room. These medical records have more then likely been handled by many other people who work at your company so I wouldn't worry about it. As long as YOU are following proper company procedure then you are fine.