The HIPAA Privacy Rule

Running head: ETHICS 1
Student name
Student No.
Unit
Title: The HIPAA Privacy Rule

ETHICS 2
Description of HIPAA and its compliance
Health care professionals are under a legal and ethical obligation to ensure privacy
and confidentiality of patient’s information. Over the past years, there has been increased
debate on what can and cannot be done with patient’s information. The debate also focused
on who have access to the patient’s information and for what purposes. With these on
discussion, the Health Insurance Portability and Accountability Act (HIPAA) saw the need to
increase accountability, health protection and effective and efficient administration on the
patient’s information. According to McCullough (2013) patient’s privacy and confidentiality
has been an issue in the health care setting, dilemma arising on what information about the
patient should not be shared and who should keep the patient’s family updated on the
treatment progress. With the introduction of the HIPAA privacy rule, there has been more
confusion in the health care facilities on what should and should not be shared as the health
care professionals fear the repercussions. The HIPAA privacy rule was put across to protect
the health information of patients as well as draw a clear cut on the rights of the patient as
pertains their health information. According to the US Department of Health and Human
Services (2017) the HIPAA privacy rule gives the patient more control over their health
information, creates boundaries on the release and use of the patient’s health information,
puts responsibility on health care professionals as the custodians of patient’s records and
gives punishment on whoever violates the rule. The rule also outlines the penalties and
consequences that follow after its violation.
McGrowan (2012) claims that since the introduction of the privacy rule, even health
professionals are afraid of giving any update on the patient’s status to their families due to
fear of violating the rule. Access to information and giving complete communication on the
patient’s status (for example when in the Intensive Care Unit) gives more satisfaction to the
patient’s family. Confidentiality is an essential element in health care setting but privacy is

ETHICS 3
not an absolute right but counterclaims like other people’s rights have to create a balance. As
a health care professional, I must be conversant with this rule so as to maintain the
boundaries set during disseminating the patient’s information to any party including the
family members. The rule allows me to share the information that is relevant to the
involvement of the family or any other person the patient identifies (Schwarzkopf et al.
2013). When the patient is able to make decisions, I may discuss the information with the
family members. In cases of emergency or when the patient is unavailable, I would have to
make the decision on the patient’s best interest. The law also allows me to disclose patients’
health information, for instance when the patient is found with a condition that puts the public
at danger.
Events of information breach
There are different ways in which health care organizations can violate the HIPAA
privacy rule. In certain American psychotherapy organisation would send the patient’s bills to
the collections company. This bills contained confidential information that could be used to
access the patient’s health care records. The State of New Jersey suspended and revoked the
organization’s license for not complying with the privacy rule, stating that in case the
patient’s bills were to send to a collection firm, then patient’s medical data must be omitted.
In another case, a nurse diagnosed her brother-in-law with an STD and send texts to her sister
to warn her of the disease. The man filled a law suit against the clinic but the judge dismissed
the case on the claim that the nurses’ actions were based on personal reason, although the
clinic had suspended the nurse (Blightma, Griffiths and Danbury, 2014). For this case, the
nurse should not have disclosed the man’s health information as per HIPAA, but still
considering that it was her close family member (her sister), one would be tempted to
disclose the information.