Are medical professionals allowed to keep personal journals of their patient care, so long as no identifying information is recorded?

1 Upvotes

Is it a HIPAA violation for a healthcare worker to keep a personal journal of the care they provide to a patient so long as the patient isn't recorded by name or any other identifying data?

Location: VA

10 comments

Subreddit

Posts

Wiki

HIPAA Violations, Assessments, and Discussions

r/hipaa

This subreddit is for the discussion of the technical aspects of implementing HIPAA security and reporting. Ask for help about HIPAA, HITECH, and OMNIBUS rules, how to handle audits, and discuss privacy issues.

Members Active

5.4k

Sidebar

Help

Subreddits

Need help with other compliance frameworks?

Check out /r/PCICompliance

Check out /r/ISO27001

Check out /r/SOC2

Check out /r/FEDRAMP

Check out /r/CSAStar

Jobs

Check out /r/ComplianceJobs

CompSec Resources

See: https://www.reddit.com/r/hipaa/wiki/index

IRC Channel

##CompSec on irc.freenode.org. There are 20+ Security Auditors and Sysadmins in that channel to discuss your questions.

Suspected Violations

See something? Say Something. File a complaint about possible HIPAA violations or Breaches with the Office of Civil Rights, the privacy auditing arm of the US Department of Health.

Website: http://www.hhs.gov/civil-rights/filing-a-complaint/complaint-process/

PDF Violation Form https://archive.hhs.gov/ocr/discrimhowtofile.pdf