A question came up this week about whether or not we could administer eye drops in the waiting room to patients having cataract surgery. This led me to Google, which led me to 'HIPAA Myth Buster'. In reading through this and related sites, I discovered that many things that we do in the name of 'HIPAA compliance' just are not necessary.
Here is but one example:
"Actually, HIPAA does permit the staff to call out patient names in waiting rooms. The regulations provide that when a physician makes the good faith effort described above, he or she is permitted to disclose information "incident to a use or disclosure otherwise permitted" by the regulations.
"The government says that means that a physician or staff member can call out names in the waiting room, hang charts outside doors, or use a whiteboard to list patients in the building or office. However, one should refrain from unnecessary disclosures. For instance, calling out names in the waiting room is fine, but calling out names and diagnoses would be problematic.""
I still don't know whether we can administer eye drops (would it be an 'incidental disclosure'?) but I do know, as I long suspected, that some of what we do is stupid and driven by the vendors that want to sell us their 'solutions.'