Health records privacy between doctors

[Anonymous]

Anonymous wrote:Are these related?
Athena health
Advantia
Privia
Epic
NextGen NXGN

I think it’s unclear, I think Epic is really common but I don’t know that just because a system uses epic they can see another system that uses epic.

The Privia practices seem to use Athena. Athena is the platform I think.

[Anonymous]

In theory, having records all connected should be good for patient care but there are valid reasons a patient doesn’t want every dr they see to know who else they have seen, what was discussed, etc and every other medical issue they have or have had.

[Anonymous]

Anonymous wrote:In theory, having records all connected should be good for patient care but there are valid reasons a patient doesn’t want every dr they see to know who else they have seen, what was discussed, etc and every other medical issue they have or have had.

A primary reason for implementing EHR was reducing health care expenditures by allowing better federal oversight of Medicare expenditures and identifying overuse of services.

[Anonymous]

I think the public needs to demand reform.

We didn't agree to the sharing of this information and it is a violation of our privacy. Sure, maybe it's convenient - for the physicians. But at what price?

It's not just the physicians who have access to this information. Many, many people from the receptionist to the bill collector can snoop if they want to. This information falls into the wrong hands and there are repercussions.

[Anonymous]

Anonymous wrote:In theory, having records all connected should be good for patient care but there are valid reasons a patient doesn’t want every dr they see to know who else they have seen, what was discussed, etc and every other medical issue they have or have had.

Such as?

[Anonymous]

Anonymous wrote:

Anonymous wrote:In theory, having records all connected should be good for patient care but there are valid reasons a patient doesn’t want every dr they see to know who else they have seen, what was discussed, etc and every other medical issue they have or have had.

Such as?

Read the thread.

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:In theory, having records all connected should be good for patient care but there are valid reasons a patient doesn’t want every dr they see to know who else they have seen, what was discussed, etc and every other medical issue they have or have had.

Such as?

Read the thread.

It's usually because of diagnosis shopping. Sometimes drug seeking. Is that what you meant?

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:In theory, having records all connected should be good for patient care but there are valid reasons a patient doesn’t want every dr they see to know who else they have seen, what was discussed, etc and every other medical issue they have or have had.

Such as?

Read the thread.

It's usually because of diagnosis shopping. Sometimes drug seeking. Is that what you meant?

Sigh.

[Anonymous]

Anonymous wrote:

Anonymous wrote:Would they be able to access them, theoretically? Probably. Would they be allowed to, according to HIPAA, if you did not sign a form allowing them to share records with other providers? No. And regardless, sharing of records from, say, an OB to an Ophthalmologist would only happen if the ophthalmologist had a medical reason to need to see the notes, even if you technically signed that you were ok with it. If your eye doctor is reading about your C section 12 years ago just for fun , that’s not allowed.

HIPAA doesn't require consent for sharing between providers.

It absolutely does. I work at an urgent care and if I send someone to the ER and call up to have the patients visit note faxed to me the next day, they refuse, unless I fax over a signed consent from the patient. BTDT.

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:Would they be able to access them, theoretically? Probably. Would they be allowed to, according to HIPAA, if you did not sign a form allowing them to share records with other providers? No. And regardless, sharing of records from, say, an OB to an Ophthalmologist would only happen if the ophthalmologist had a medical reason to need to see the notes, even if you technically signed that you were ok with it. If your eye doctor is reading about your C section 12 years ago just for fun , that’s not allowed.

HIPAA doesn't require consent for sharing between providers.

Even if it did require it how would they know if a dentist was reading ob-Gyn details of a patient? The thought of open access like that is unnerving. Plus most of us just sign the HIPPA paperwork without fully knowing what it all covers.

Specific to my immediate concern, I know my family member read my file because of a comment slip and I don’t want to provide the opportunity to breach again with new dr office. Info could just be pulled up by a name search?

They would know because in EHRs, admins can see who has accessed what information and when. For health privacy violation purposes. Health info in an EHR is on a need to know basis. As a doc, I’m not allowed (per HIPAA) to read a patients social work note from when a social worker met with them in the ER one time a few years ago, unless I actually need that information. And if I click on it and read it, and one day the patient calls our facility and goes “I just have a hunch that Dr B is reading my private psychiatric health info even though Dr B is my dermatologist”, the facility can very easily check and see that yes I absolutely read my patients social work and psych notes. And I’d be fired.

[Anonymous]

Anonymous wrote:I think the public needs to demand reform.

We didn't agree to the sharing of this information and it is a violation of our privacy. Sure, maybe it's convenient - for the physicians. But at what price?

It's not just the physicians who have access to this information. Many, many people from the receptionist to the bill collector can snoop if they want to. This information falls into the wrong hands and there are repercussions.

Yes they can snoop, and if they are caught (very easy for you to ask your practice to check who has accessed your notes from whichever visit), they will be fired and/or be at risk of losing their license. It’s a very big deal.

[Anonymous]

Anonymous wrote:

Anonymous wrote:I think the public needs to demand reform.

We didn't agree to the sharing of this information and it is a violation of our privacy. Sure, maybe it's convenient - for the physicians. But at what price?

It's not just the physicians who have access to this information. Many, many people from the receptionist to the bill collector can snoop if they want to. This information falls into the wrong hands and there are repercussions.

Yes they can snoop, and if they are caught (very easy for you to ask your practice to check who has accessed your notes from whichever visit), they will be fired and/or be at risk of losing their license. It’s a very big deal.

Right. Because the good cops always tell the truth about the dirty cops, and nobody ever backs their own side despite wrongdoing.

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:Would they be able to access them, theoretically? Probably. Would they be allowed to, according to HIPAA, if you did not sign a form allowing them to share records with other providers? No. And regardless, sharing of records from, say, an OB to an Ophthalmologist would only happen if the ophthalmologist had a medical reason to need to see the notes, even if you technically signed that you were ok with it. If your eye doctor is reading about your C section 12 years ago just for fun , that’s not allowed.

HIPAA doesn't require consent for sharing between providers.

It absolutely does. I work at an urgent care and if I send someone to the ER and call up to have the patients visit note faxed to me the next day, they refuse, unless I fax over a signed consent from the patient. BTDT.

It's common practice to do signed consent forms, but HIPAA doesn't require it. There are authoritative references earlier in this thread.

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:Would they be able to access them, theoretically? Probably. Would they be allowed to, according to HIPAA, if you did not sign a form allowing them to share records with other providers? No. And regardless, sharing of records from, say, an OB to an Ophthalmologist would only happen if the ophthalmologist had a medical reason to need to see the notes, even if you technically signed that you were ok with it. If your eye doctor is reading about your C section 12 years ago just for fun , that’s not allowed.

HIPAA doesn't require consent for sharing between providers.

It absolutely does. I work at an urgent care and if I send someone to the ER and call up to have the patients visit note faxed to me the next day, they refuse, unless I fax over a signed consent from the patient. BTDT.

but I am sure the ER doc can phone your doc to get direct verbal info without written consent.

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:Would they be able to access them, theoretically? Probably. Would they be allowed to, according to HIPAA, if you did not sign a form allowing them to share records with other providers? No. And regardless, sharing of records from, say, an OB to an Ophthalmologist would only happen if the ophthalmologist had a medical reason to need to see the notes, even if you technically signed that you were ok with it. If your eye doctor is reading about your C section 12 years ago just for fun , that’s not allowed.

HIPAA doesn't require consent for sharing between providers.

Even if it did require it how would they know if a dentist was reading ob-Gyn details of a patient? The thought of open access like that is unnerving. Plus most of us just sign the HIPPA paperwork without fully knowing what it all covers.

Specific to my immediate concern, I know my family member read my file because of a comment slip and I don’t want to provide the opportunity to breach again with new dr office. Info could just be pulled up by a name search?

They would know because in EHRs, admins can see who has accessed what information and when. For health privacy violation purposes. Health info in an EHR is on a need to know basis. As a doc, I’m not allowed (per HIPAA) to read a patients social work note from when a social worker met with them in the ER one time a few years ago, unless I actually need that information. And if I click on it and read it, and one day the patient calls our facility and goes “I just have a hunch that Dr B is reading my private psychiatric health info even though Dr B is my dermatologist”, the facility can very easily check and see that yes I absolutely read my patients social work and psych notes. And I’d be fired.

Doctors don't even get fired for removing the wrong body part in a surgery. They're certainly not getting fired for a HIPAA violation.