But, according to a JD Supra report, HIPAA laws do not apply to employment records held by a healthcare entity. However, individually identifiable health information maintained or transmitted by a covered entity in its healthcare capacity are treated as protected health information.
Here are three things healthcare providers should know about employee medical records:
1. If the records a healthcare entity needs to obtain are medical records of their employee, then HIPAA exceptions would apply.
2. A HIPAA-covered entity is only allowed to use or disclose protected health information for treatment, payment or healthcare operations.
3. If a health system needs to look into an employee’s medical record, it must do so for an extremely limited purpose, as listed by the “healthcare operations exception.”
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.