Does HIPAA Even Exist for Large Corporations? -- PART 2
Today I got my official reply to my HHS Office of Civil Rights complaint of 5/3/24 against CVS for violating HIPAA regulations. The minor and rather impressive miracle here is that I got a signed letter from an attorney in only 17 days with relevant regulations and interpretations attached. Good so far.
The result was that they are not going to pursue a formal complaint -- instead they are going to "resolve this matter informally through the provision of technical assistance to CVS."
HHS OCR points out that "a covered entity must maintain reasonable and appropriate administrative, technical, and physical safeguards to prevent intentional or unintentional use or disclosure of PHI in violation of the Privacy Rule and to limit its incidental use and disclosure pursuant to otherwise permitted or required use or disclosure.... Further, under the Security Rule, with certain exceptions, the use of encryption is addressable; i.e., not mandatory." [red emphasis mine]
HHS further states under Reasonable Safeguards that "It is not expected that a covered entity’s safeguards guarantee the privacy of protected health information from any and all potential risks. Reasonable safeguards will vary from covered entity to covered entity depending on factors, such as the size of the covered entity and the nature of its business."
If HHS OCR actually in fact offers this technical assistance in a meaningful way, that WOULD satisfy my complaint -- not that anyone is asking me. This was almost certainly a stupid screw-up by someone in CVS Info Tech programming the canned computer "after visit summary" process to send out way too much information in unencrypted format to people who received a COVID booster at a CVS. If CVS STOPS doing this, I'm good.
To recap -- I received an after-visit summary not only listing what COVID booster med I received, but also my DOB, home address, and all the answers to my screening questionnaire including my answers to whether or not I have ever had a seizure, a bleeding disorder, am currently pregnant, am immunocompromised (including from cancer), have a history of myocarditis, and many other questions.
I will waste my time writing HHS OCR back to thank them and to remind them that to the best of my knowledge I never signed a release for disclosure (which apparently has no legal bearing here?), and that in this new age of AI every major tech company is incorporating AI into EVERYTHING. If I had a Gmail account, Google would have all my medical information from this CVS after visit summary email and likely would be utilizing AI to monetize it in some way.
I suppose the good news here for small psychotherapy practices is that if this is close to acceptable practice for even a giant company like CVS, then maybe we have little to worry about when it comes to client privacy. Heck -- why not just email client PHI to them without getting releases first? Why have encrypted client portals for communication?
-- Michael
**Does HIPAA Even Exist for Large Corporations? -- PART 1**
I don't care if anyone knows I just got a COVID vaccine. Most people don't care.
However, CVS Pharmacy just sent me an after-visit report across unencrypted Internet to my email address.
The form included such fields as:
-- My Full Name
-- **DATE OF BIRTH!**
-- My Full Home Address
-- Medication Administered
-- Date and Time of Appointment
-- Name of Pharmacist I saw
-- Name of Doctor at CVS overseeing it all
-- Name and Address of my Primary Care Doctor
Also:
-- All the answers to my *screening questionnaire!* including my yes/no answers to multiple medical conditions such as heart problems, immunocompromise, seizures & other brain problems, and pregnancy.
So many things wrong here. This is almost enough information for identity theft (lacking only SSN). It gives away LOTS of my medical information. If I had a Gmail email address, Google would now have all this information. What if I was a pregnant female in the southern USA where Attorney Generals are starting to track state of pregnancy for later prosecution if women go out-of-state for abortions or have a suspicious (to them) miscarriage?
**How does CVS get away with this when smaller medical offices have to be so careful?**
Michael Reeder, LCPC
#AI #EHR #medicalnotes #progressnotes #healthcare #patientportal #HIPAA #dataprotection #infosec @infosec@a.gup.pe #doctors #hospitals #CVS #COVID #sars-cov-2 #longcovid #severecovid#covidisnotover #pharmacy #vaccine
What's the chance* that GOP MAGAts will come around to banning vasectomies now that the young'uns are choosing to sterilize themselves rather than face the Big Government overreach of abortion bans?
I mean, how can you enslave child-bearing folks under the boot of capitalism if they refuse to create a steady labor supply?
*The chance is very likely slim to none since the patriarchy by definition values men's rights. But still, capitalism also requires an underclass, and forced birth plunges many into that category without regard to gender.
Why isn't there an #AI bot trained to summarize peer-reviewed #medical studies so that #doctors can more easily stay informed about advancements in #healthcare ?
"A judge in Ohio could rule as soon as Monday in a case that could overthrow the state’s 2019 abortion ban...A ballot measure approved by voters last year already rendered much of that law moot, but parts remain in place including reporting requirements and a 24-hour waiting period, which can add stress and an increased financial burden for those in need of abortion care."
Kristi Noem Said She Is Proud to “Support Babies, Moms, and Families.”
Her Record Shows Otherwise, Critics Say.
As #SouthDakota governor, Noem has rejected programs and millions of dollars in federal funds that would have benefited #parents and #children and provided care during #pregnancy.
Critics say her rhetoric is “all hat and no cattle.”
Buy Ambien 10mg Online To Best Sleeping Pills Within A Few Minutes (hub.alfresco.com)
Click Here:- https://actionpills.com/product/ambien-10-mg/...
Buy Ambien Online: Quick and safe medication delivery In Washington, USA (hub.alfresco.com)
Visit Here:- https://actionpills.com/product-category/buy-ambien-online/...
Buy Ambien Online Speedy (www.fimfiction.net)
Buy Now:- https://actionpills.com/product-category/buy-ambien-online/...
Order Restoril 15mg Online Cost-Free Shipping Service In Mississippi (hub.alfresco.com)
Buy Now- https://actionpills.com/product/restoril-15-mg/...
Buy Restoril 30mg Online Reliable Delivery# In Kentucky, USA (hub.alfresco.com)
Order Now- https://actionpills.com/product/restoril-30-mg/...
𝐄𝐦𝐩𝐨𝐰𝐞𝐫 𝐘𝐨𝐮𝐫𝐬𝐞𝐥𝐟 𝐁𝐮𝐲 𝐊𝐥𝐨𝐧𝐨𝐩𝐢𝐧 𝟏 𝐦𝐠 𝐟𝐫𝐨𝐦 𝐌𝐞𝐝𝐢𝐱𝐰𝐚𝐲
𝐎𝐫𝐝𝐞𝐫 𝐓𝐨 𝐕𝐢𝐬𝐢𝐭 𝐍𝐨𝐰 >> 𝐁𝐮𝐲 𝐊𝐥𝐨𝐧𝐨𝐩𝐢𝐧 𝟏 𝐦𝐠 𝐎𝐧𝐥𝐢𝐧𝐞
Buy Restoril Online with Checking Proper Review & Product Reality In USA (hub.alfresco.com)
Get Links - https://actionpills.com/product-category/buy-restoril-online/...
Buy Ambien 5 Mg Online With Facilities Of ➥Buy One Get One Sale➦ (hub.alfresco.com)
Get Now:- https://actionpills.com/product/ambien-5-mg/...
Buy Ambien 10mg Zolpidem Without Prescription Express Delivery In Idaho (hub.alfresco.com)
Buy Links:- https://actionpills.com/product/ambien-10-mg/...
Buy Ambien Online Quick And Safe Medication # In Illinois, USA (hub.alfresco.com)
Place Your Order :- https://actionpills.com/product-category/buy-ambien-online/...
Purchase Ambien 5mg Online (www.ticketleap.events)
Get Now:- https://actionpills.com/product/ambien-5-mg/...
Purchase Ambien 10mg Online (www.ticketleap.events)
Click Here:- https://actionpills.com/product/ambien-10-mg/...
Purchase Ambien Online (www.ticketleap.events)
Click To Buy:- https://actionpills.com/product-category/buy-ambien-online/...
Best Option To Order Ambien 5mg Online Free Delivery In USA (www.ticketleap.events)
Get Now:- https://actionpills.com/product/ambien-5-mg/...
Best Place To Buy Ambien 10mg Online Overnight # In South Carolina, USA (www.ticketleap.events)
Click Here:- https://actionpills.com/product/ambien-10-mg/...
Legally Buy Ambien Online In USA @ Midnight (www.ticketleap.events)
Click To Buy:- https://actionpills.com/product-category/buy-ambien-online/...