Q: Is it against HIPPA law for a company to circulate names on a list for getting Covid-19 vaccines?
Company sent reminder e-mail to all employees for the up-coming COVID-19 vaccine clinic they are offering on-site. The link takes you to a listing of all names and times of those who signed up for it. What happened to medical privacy?
A: Poor practice on the company's part, maybe, but I don't see this rising to a HIPPA violation. What personal health information is being disclosed other than someone having signed up for a timeslot, and an inference that those persons will now be vaccinated? Your point is well taken that steps should have and could have been taken by the company so that employees could still sign up without knowing when and if others have.
A: This may be helpful.
HIPAA generally does not apply to a company unless they are a 'covered entity', 'affiliated business', or information acquired through a group health plan. And it is possible there is some overlap between the company and clinic, where the company conceivably could be an 'affiliated business' or where the vaccine is being administered through the group health plan. And some persons at the employer would still need to know otherwise protected health information, even through the group health plan. But that doesn't mean a HIPAA violation has occurred in this situation.
According to the HHS.
“Individually identifiable health information” is information, including demographic data, that relates to, the individual’s past, present or future physical or mental health or condition, the provision of health care to the individual, or the past, present, or future payment for the provision of health care to the individual, and that identifies the individual or for which there is a reasonable basis to believe it can be used to identify the individual.
Justia Ask a Lawyer is a forum for consumers to get answers to basic legal questions. Any information sent through Justia Ask a Lawyer is not secure and is done so on a non-confidential basis only.
The use of this website to ask questions or receive answers does not create an attorney–client relationship between you and Justia, or between you and any attorney who receives your information or responds to your questions, nor is it intended to create such a relationship. Additionally, no responses on this forum constitute legal advice, which must be tailored to the specific circumstances of each case. You should not act upon information provided in Justia Ask a Lawyer without seeking professional counsel from an attorney admitted or authorized to practice in your jurisdiction. Justia assumes no responsibility to any person who relies on information contained on or received through this site and disclaims all liability in respect to such information.
Justia cannot guarantee that the information on this website (including any legal information provided by an attorney through this service) is accurate, complete, or up-to-date. While we intend to make every attempt to keep the information on this site current, the owners of and contributors to this site make no claims, promises or guarantees about the accuracy, completeness or adequacy of the information contained in or linked to from this site.