Is Patient Privacy Protected?
Yes. A federal law called the Health Insurance Portability and Accountability Act (HIPAA) identifies who's allowed access to medical records. Specifically, HIPAA protects:
- any information that your doctors, nurses, or other health care providers put in the medical record
- conversations between doctors and others about your family's care or treatment
- information about your family in the health insurance carrier's computer system
- billing information
So you shouldn't worry if, for example, your nosy neighbor happens to work in the same hospital where your child receives treatment. HIPAA bars anyone from snooping into patient records. And any attempt to access classified information would likely trip an alarm within the institution's computer's system and can be traced.
Also, hospital employees only have access to the parts of the EHR required to do their job. This helps keep the rest of the record secure and private. And after a user's session has been inactive for a few minutes, the system automatically logs off to protect others from viewing the information.
In addition, a provision of the law, called the Security Rule, specifically addresses the security of EHRs by establishing national standards for protecting certain health information that is stored or transferred in electronic form. Any provider who transmits health information electronically is required by law, for example, to have safeguards (hardware, software, etc.) in place to limit access to that information to those permitted to see it.
Can I Access My Child's Files?
Yes. Just like with old-fashioned paper charts, you have the right to view your child's medical information. Because EHR technology is still in its infancy, not all health care facilities provide ways for patients and their families to log into the system, but some do.
If your health care provider offers this service, ask what's required of you. You'll probably need to register into the system and provide a username and password. Things like your child's medical history, family history, allergies, and prescription medications will be viewable, but any physician notes, test results that haven't been reviewed, and most psychiatric evaluations will be hidden. Additionally, if your child is a teenager, it's likely that more areas will be hidden to protect your child's privacy.
If your health care facility does not yet offer access to EHRs, you still can request a paper or digital (CD-ROM) copy of the file. Digital copies can be stored on software known as a Personal Health Record (PHR), either on your home computer or online. Some online PHRs are free, while others have initial setup fees and monthly maintenance costs.
With these accounts, you'll be responsible for keeping your records up to date. While this may take some work, it's a good way to make sure that all of your child's medical information is in one place. Patient-owned records are especially useful for managing the care of kids with chronic conditions and those who receive care at multiple institutions.
Reviewed by: Jeremy Michel, MD
Date reviewed: September 2011