directory information (HIPAA)

HIPAA's Privacy Rule allows inpatient health care facilities to continue to maintain "directories" of current patients, but restricts the information in them to the following:

  • name;
  • location in the facility;
  • "condition described in general terms, that does not communicate specific medical information"; and
  • religious affiliation.

Except for religious affiliation, the information may be disclosed to anyone who asks for the individual by name. Religious affiliation information may be disclosed to members of the clergy.

No authorization is required for disclosure of such limited information. However, this is one of the kinds of information use about which patients must be informed in advance, and given an opportunity to prohibit or restrict the practice. Oral notice, and an oral agreement or objection in response, is sufficient according to the regulations, but most facilities will elect to put this in a formal "consent" form.

In emergency circumstances where it is not possible to give an individual an opportunity to object, directory information disclosures can be made if the provider feels it would be in the best interests of the patient, and no prior expressed preference of the individual to the contrary is known. An opportunity to object must be provided as soon as is practical.

See also:

 
 

   © 2002-2006 Contributing authors and University of Miami School of Medicine