Scenario #1:

Some doctors believe, incorrectly, that if a patient has already disclosed protected health information on the Internet, his doctor can “correct” the record online. In other words, if a patient slams a doctor online, and attaches his name or picture to the review, many doctors believe the toothpaste is out of the tube, and the doctor can tell their side of the story. After all, it was the patient who spilled the beans. The doctor is just making sure the public record is accurate.

Unfortunately, the doctor is not free to respond, if doing so would disclose any protected health information. This includes even acknowledging there is/was a doctor-patient relationship.

The doctor can respond and disclose protected health information if (a) the patient authorizes such a release in writing; or (b) if the disclosure falls under an explicit exception where the patient’s authorization is not required. Unless one of these conditions is met, responding online is risky. If a patient has slammed the doctor online, it is unlikely he will authorize a retort. And most exceptions to requiring the patient’s signed authorization are not triggered by the standard rant.

Scenario #2:

Doctors ARE allowed to disclose protected health information to defend themselves against a lawsuit. It’s only fair. The medical record cannot serve as both a sword and a shield. A patient cannot simultaneously sue a doctor alleging he violated the standard of care and then cry foul when he defends using the medical record.

Here’s one tricky situation.

Occasionally, one treating doctor will cast aspersions on a prior treating doctor. This may rile the patient up. This may lead to the first doctor being sued. The first doctor can use the medical record to defend himself.

What about the second doctor? Can he report on the litigation on his blog? After all, litigation IS a public record.

The short answer is no.

If both doctors have treated this patient, they are covered by HIPAA. The first doctor, the one being sued, can defend against allegations and disclose protected health information.

But, the second doctor, who is not a party to the litigation, is foreclosed from disclosing protected health information without the patient’s authorization. Note: an independent third party who never took care of this patient, could report on the case, because he is not disclosing any protected health information for one of his patients. In this role, the independent third party is more like a journalist.

 

Tricky stuff. Don’t kill the messenger.