Cardiovascular News

Your Medical Records and Your Privacy

If you've been to the doctor, dentist, or pharmacist over the last year, you may have received a copy of the Notice of Privacy Practices, required by new federal health privacy rules. In fact, you probably were asked to initial a form to show that you were told about the rules. Like many people, you may have wondered why. Or maybe you wondered, "Does this mean my records were not kept private and secure before?"

Although many privacy rules already existed, these new federal rules are intended to make your health information more private and secure than ever before. And now, doctors, health plans, and others have to let you know what the law says about keeping health information private. You may have heard these new rules referred to as "HIPAA."

What Is HIPAA?

HIPAA stands for Health Insurance Portability and Accountability Act. It gives you more control over how your health information is used and to whom it is released. Also, these new standards ensure that you can have access to your medical records.

No matter who you are or where you live in the United States, HIPAA is intended to provide you a certain level of privacy protection. Many privacy regulations were already in place by state laws. But the HIPAA rules create a federal standard that applies to everyone and can be enforced evenly. The reason you may be hearing so much about HIPAA now is that compliance with the privacy safeguards was required as of April 14, 2003.

What does HIPAA do for you?

Helps ensure that your medical records are secure, both paper records and those stored in computers
Clearly defines when health information should and should not be released
Makes you aware of your rights

How HIPAA Helps Keep Your Records Secure

HIPAA defines how healthcare providers must handle a patient's private information:

Most groups with access to health records (for example, a hospital or health plan) must implement a privacy policy.
Employees who work with health records must receive training about HIPAA.
Reasonable and appropriate technical measures must be taken to secure health records.
Health records typically must be destroyed before they are thrown away.

What HIPAA Means to You

HIPAA lets us know that we all have access to our own records and that we have a say in who else gets to see them. There are times when you don't want your medical records to be released unless you allow it. For example, when you apply for life insurance, it is your decision to share your records.

Other times, it is crucial that medical records are available. In an emergency, doctors and nurses need to know your medical history to give you the best care possible. Sometimes, health information can help prevent a major outbreak of disease.

Before HIPAA, you already had many of these rights. Now it is easy for you to stay informed. Most healthcare providers have to tell you about HIPAA. The rules should be posted at your hospital or doctor's office. You can even get a copy to take home with you.

When your healthcare provider tells you about HIPAA, you will be asked to acknowledge that you have been told about the rules. Different healthcare facilities may have different forms. But they all mean the same thing. By signing or initialing this form, you are saying that you have been told about:

Your right to privacy
Your healthcare provider's responsibilities to keep your records private and secure
How your health information can be used
Who to contact if you have questions or choose to report a problem

Guidant Embraces HIPAA

Although Guidant is not directly regulated by HIPAA, Guidant's policies and practices are consistent with HIPAA principles, along with other privacy and security standards. Guidant employees who work with health information receive privacy and security training. Guidant is implementing internal processes that are intended to be strong with regard to keeping health information private. For example, processes are in place to keep secure the paper records that you share. And Guidant has processes intended to keep up with the latest technology in striving to make sure that all electronic information is protected, too.

If you would like to learn more, visit the Department of Health and Human Services website.

< Back to previous articles