Every physician and healthcare worker has heard the serious warnings related to HIPAA Violations. For most, being cautious, following the rules, and putting safeguards in place protects them from breaches of patient privacy and the resulting penalties. But what if someone outside of your practice loses data about your patients’ health, medical records, or personal information? You could be held responsible.
Of course any entity that you share patient information with is supposed to operate under the HIPAA Laws, but if you give medical records out that are eventually lost or stolen, you could be held liable. It could come back to you at some point. Healthcare providers, health insurance plans, and data management companies that regularly receive information from physicians are held responsible if the information is lost or gets in the wrong hands. All of these entities are supposed to encrypt the medical records stored electronically to avoid this problem. But there are many unknowns involved when information is shared and stored by multiple groups.
For example, in a recent article, a malpractice law firm lost a portable hard drive that included information on over 100 patients involved in a MedMal claim against a cardiologist in Baltimore. Apparently HIPAA does not regulate law firms. Maybe it should. The hard drive had medical records of the patients, names, social security numbers, and more. Unfortunately, this will only add fuel to the fire for the claim against this physician.
So what should you do? First, make sure you understand the HIPAA rules and follow them. Make sure any person or entity that you share healthcare information with does the same. You should also make sure your medical malpractice insurance policy has coverage for HIPAA Violations. If it doesn’t, you should purchase an additional policy. Having this coverage could potentially save you hundreds of thousands of dollars in the future. You can get a Medical Defense policy that adds other important coverage as well. Contact your Keane Insurance Group representative for more information.