October 4, 2018Nelson Mullins Broad and Cassel’s Paul DeMuro Elected to Medical Group Management Association Board
November 8, 2017
On October 27, 2017, the Department of Health and Human Services’ Office for Civil Rights (OCR) released guidance about the situations in which health care providers may share a patient’s health information with family members or friends when that patient may be in crisis and possibly incapacitated, such as during an opioid overdose. The guidance was issued the day after President Trump directed Acting HHS Secretary Eric Hargan to declare the opioid crisis a “public health emergency.”
In situations where there are no federal or state laws that provide more stringent privacy protections than HIPAA, health care professionals are permitted share health information without a patient’s consent to the following persons under the following two circumstances:
However, where patients have decision-making capacity and a health care provider does not determine that the patient’s conduct poses a serious and imminent threat to the patient’s health or safety, the provider must first offer the patient an opportunity to agree or object to the sharing of health information before the provider may give information to the patient’s family, friends, or others.
The guidance emphasizes that the decision-making capacity of an individual who is under the influence of opioids or other substances will fluctuate. Health care providers must determine that a patient is unable to make health care decisions before sharing information with appropriate family members or friends under these circumstances. If the patient regains capacity during a hospital stay or patient encounter, the provider must obtain the patient’s permission before sharing any further health information—again, except in a case where the provider believes under the circumstances that sharing information with a family member or friend is indicated because the patient poses a serious and imminent threat to his or her health and the family member is in a position to prevent or lessen that threat.
Finally, the guidance notes that providers may share a patient’s health information with the patient’s personal representative to the same extent as the information may be shared with the patient. Thus, if a patient is an unemancipated minor or an incapacitated adult, a health care provider generally may share health information with the minor’s parent or guardian, or with the adult’s guardian or health care power of attorney, without restriction. An exception to this general rule would arise if applicable state or other federal law provides greater privacy protection for unemancipated minors or incapacitated adults under these circumstances.
These materials have been prepared for informational purposes only and are not legal advice. This information is not intended to create, and receipt of it does not constitute, an attorney-client relationship. Internet subscribers and online readers should not act upon this information without seeking professional counsel.