How will the HIPAA rules apply to hospital websites that have on-line nurserys listing babys date of birth, parents first names, etc?
The hospital would not be able to post that information without the patient’s authorization. You also need to make sure that your privacy policies cover all areas of potential or anticipated disclosures of patient information outside treatment, payment or healthcare operations – you will still need the patient’s permission to disclose, however if an area of disclosure it is not stated in your policy then you will not be able to make such disclosure – with or without the patient’s permission – until you change your policies and make notification.