Does the HIPAA Privacy Rule require that covered entities document all oral communications and provide patients with access to oral information?
No. The Privacy Rule does not require covered entities to document oral information used or disclosed for treatment or health care operations. Similarly, the Privacy Rule only requires covered entities to provide individuals with access to protected health information about themselves contained in the “designated record set” maintained by the covered entity. The term “record” pertains to information that has been recorded in some manner. The Rule does not require covered entities to tape or digitally record oral communications, nor retain digitally or tape recorded information after transcription. But if such records are maintained and used to make decisions about the individual, they may meet the definition of “designated record set.” For example, a health plan is not required to provide a member access to tapes of a telephone advice line interaction if the tape is maintained only for customer service review and not to make decisions about the member.
Related Questions
- Does the HIPAA Privacy Rule require that covered entities document all oral communications and provide patients with access to oral information?
- Does the HIPAA Privacy Rule require that covered entities provide patients with access to oral information?
- Does the HIPAA Privacy Rule require that covered entities document all oral communications?
