Is it a Hipaa Violations to use someone else's password to submit a medical bill? I work for a Third party billing agency who is letting their employees go onto clients systems to bill and obtain patient data who does not have their own access. I am concerned as it is my name the hospital has on file and who they gave the access.

It is a violation for anyone to access medical records they are not authorized to.

That being said I'm not clear what actually is happening. My company uses a third party service. They set the password for employees so they can access the claims history to make payments. This is all authorized.

I don't understand why each employee does not have their own user id and password. But the agency can get in serious trouble for not doing so.

Can you please explain this a little more clearly? State the situation in steps and indicate what kind of companies and clients you mean, and who you mean 'doesn't have their own access.'

Quote:

---

Originally Posted by moodydjinn

Is it a Hipaa Violations to use someone else's password to submit a medical bill? I work for a Third party billing agency who is letting their employees go onto clients systems to bill and obtain patient data who does not have their own access. I am concerned as it is my name the hospital has on file and who they gave the access.

---

Your employer , call it "TPBA") is employed by a hospital to send bills to third parties (normally insurance companies).

TPBA employees such as yourself have been given individual passwords to hospitals' databases. These passwords have been given by the individual "client" hospitals.

The patients of such client hospitals do not have their own passwords.

Are you sharing your password with other employees of TPBA who do not have their own passwords? Is that the issue?