• Revenue Cycle Management
  • COVID-19
  • Reimbursement
  • Diabetes Awareness Month
  • Risk Management
  • Patient Retention
  • Staffing
  • Medical Economics® 100th Anniversary
  • Coding and documentation
  • Business of Endocrinology
  • Telehealth
  • Physicians Financial News
  • Cybersecurity
  • Cardiovascular Clinical Consult
  • Locum Tenens, brought to you by LocumLife®
  • Weight Management
  • Business of Women's Health
  • Practice Efficiency
  • Finance and Wealth
  • EHRs
  • Remote Patient Monitoring
  • Sponsored Webinars
  • Medical Technology
  • Billing and collections
  • Acute Pain Management
  • Exclusive Content
  • Value-based Care
  • Business of Pediatrics
  • Concierge Medicine 2.0 by Castle Connolly Private Health Partners
  • Practice Growth
  • Concierge Medicine
  • Business of Cardiology
  • Implementing the Topcon Ocular Telehealth Platform
  • Malpractice
  • Influenza
  • Sexual Health
  • Chronic Conditions
  • Technology
  • Legal and Policy
  • Money
  • Opinion
  • Vaccines
  • Practice Management
  • Patient Relations
  • Careers

HIPAA Consult


Answers to your questions about...notice of privacy practice;listing of diagnosis codes; psychotherapy notes

Notice of privacy practices

Q. What are my obligations under HIPAA when it comes to distributing our office's notice of privacy practices?

If, in looking over your records, you find nothing to indicate that an established patient ever received your notice of privacy practices, give that patient the notice and try to obtain the patient's written acknowledgment. A word of caution: If you continue to treat a patient who hasn't received an NPP, that patient has the right to file a complaint against you with the Office for Civil Rights, US Department of Health and Human Services.

Listing diagnosis codes

Q. Does HIPAA permit diagnosis codes to be on patient statements?

A. Yes. It permits this information on patient statements, just as it permits a patient's name, address, date of service, and other operationally appropriate data. That said, if you're uncertain who else besides the patient might have access to her statement, exercise reasonable caution. For instance, if you send the statement via regular mail, label the envelope "Confidential." If you fax it, alert the patient so that she can retrieve it.

Psychotherapy notes

Q. I received a medical release form that authorizes me to disclosure "psychiatric information" about a patient I've been treating for depression. Does this release require me to release her "psychotherapy notes"?

A. No. The term "psychiatric information" refers to any data in the medical record that has to do with a patient's psychiatric diagnosis, treatment, and so on. The term "psychotherapy notes," on the other hand, has a distinct meaning under HIPAA. It refers to notes that have been made by a psychiatrist or therapist that are retained separate and apart from the medical record. For this reason, just because you've been authorized to disclose your patient's psychiatric information doesn't mean you can also disclose psychotherapy notes in your possession that pertain to her.

Margaret M. Davino (
) is a healthcare attorney with Kaufman Borgeest & Ryan, in New York City.

This department answers common HIPAA-related questions. It isn't intended to provide specific legal advice. Please submit questions via e-mail to
, or by regular mail to Medical Economics, 5 Paragon Drive, Montvale, NJ 07645, ATTN: HIPAA CONSULT. If we select your query, we'll address it in an upcoming issue. Your name will not be used.

Related Videos
© National Institute for Occupational Safety and Health
© National Institute for Occupational Safety and Health
© National Institute for Occupational Safety and Health
© National Institute for Occupational Safety and Health
© National Institute for Occupational Safety and Health
© National Institute for Occupational Safety and Health