Q: If a patient is incapacitated, the Privacy Rule allows for a doctor to discuss the patient’s condition with a family member, according to HHS. What would the protocol be when the patient is divorced, but the ex-husband or ex-wife makes an inquiry about the patient’s status?
Q: I understand that disclosures of PHI can be made to law enforcement without patient authorization when the patient is suspected of committing a crime. What disclosures are permitted when law enforcement officials are investigating another person of a crime and a patient’s PHI may or may not provide evidence?
Q: Do you know if offices have any tablets or computers people can use in which they might log into an account? If so, are there rules governing password retention or auto logouts they need to consider?
Q: The use of telemedicine and telehealth has expanded dramatically during the COVID-19 pandemic. What should case managers be aware of when determining the most viable telemedicine options for patients?
Q: When would you use the ICD-10-CM codes for opioid or marijuana use when no mental, behavioral, or other disorder is connected? I’m specifically thinking of codes F11.90 (opioid use, unspecified, uncomplicated) and F12.90 (cannabis use, unspecified, uncomplicated).
Q: Regarding patient portals, to what degree is it the individual’s responsibility to keep his or her health information private? Would the healthcare organization be liable if someone else obtained the individual’s login credentials—perhaps if the individual is known to use the same password for many applications—and accessed the records?
