The world has changed. Client information (especially health information) can no longer be freely discussed or shared with just anyone. In previous years there has been limited regulations on privacy of health information. The how, why, and to who information was shared was less scrutinized, which allowed people to inadvertently gain access to information that was not necessary.
There are very specific rules for who and when it can be used, discussed, shared or disclosed. These rules are outlined in various Health Insurance Portability and Accountability Act of 1996 (HIPAA) (Codington-Lacerte, 2014). HIPAA is a set of standards that are used across the nation in an attempt to protect personal health information (Summary, n.d.). HIPAA uses the term covered entities to include entities that would not need a release signed such as health care providers, health plans, and healthcare clearninghouses (Summary, n.d.). The basic assumptions with HIPAA is that all personal health information (PHI) is kept to only those who need to know and is not disclosed to anyone. The values and beliefs associated with this concept is simple in that the primary goal is to limit how and when PHI is released. To do this HIPAA policies include information regarding the minimum necessary requirement. The minimum necessary requirement is defined as steps taken to limit the PHI to the minimum necessary for the intended purpose (Minimum, n.d.).
Opportunities and obstacles associated with a HIPAA policy include understanding what is covered under HIPAA and setting up safeguards to ensure the requirements are followed. HIPAA has great opportunities to help increase confidentiality and put a new focus on personal health information getting in the hands of those who do not need to know. The obstacles fall into play when looking at the many routes information can be shared. Going into the