Ah. Breathe a sigh of relief, Mr. and Mrs. HIPAA privacy and security officer. Another year is winding down, and your facility hasn't suffered a major breach of patient information.
If you need to copy some medical records that include PHI, you're probably on point when taking steps to ensure privacy. You make sure no one's around. You grab the documents right from the copier when you're done, you don't forget the originals, and you take the records where they need to go. No one sees them. No HIPAA violations here.
Provider-based clinics and departments are increasingly common, but the rules for provider-based billing can often be confusing, especially given recent changes to modifiers and place of service codes.