Q. Please explain in an understandable way for nontechnical individuals what level of encryption is needed for e-mail to be considered secure as defined in the interim final breach notification rule.
Q. May a preadmission nurse leave messages (e.g., “This is a reminder that your surgery is tomorrow; please don’t drink or eat anything after midnight.”) on an answering machine or mobile phone voice mail?
Q. An insurance company is requesting copies of medical records to review our CPT coding. These cases are at least a year old and have been paid already. The insurance company said its review will not affect our payment. Do we need patient authorization to release these records, since this does not involve treatment, payment, or office operations?
Q. We are an MRI facility, and our services are referral- based. Faxing MRI reports to referring providers after radiologist review is our standard procedure. Patients can schedule follow-up appointments with referring providers to obtain results of their MRI scans. Patients regularly request a copy of the report at the time of their MRI scans or within several days of the scan when they pick up a copy of MRI films.
Does HIPAA require us to provide patients a copy of the report even when the provider has not interpreted the report and image?
