How to Safeguard Privacy in a Pharmacy

HIPAA (the Health Insurance Portability and Accountability Act) is a federal law designed to keep health information private and safe. In medical settings HIPAA gives patients increased control over their health information. In pharmacy settings, patients can safeguard their privacy by following a few simple steps.

Instructions

Difficulty: Moderately Easy

1. Inspect your patient profile. Patient profiles contain a record of prescriptions filled, a medication history and other pertinent facts. Ask for a copy. Correct any errors. Add additional information that will improve care.
2. Examine disclosures of information. Pharmacies usually disclose private health information to physicians, insurance companies and companies hired to process insurance claims. Pharmacies should not be selling this information to pharmaceutical manufacturers or marketing agencies.
3. Request private counseling. Private health matters should be discussed away from the public pharmacy counter. HIPAA requires pharmacists to honor such requests.
4. Use caution with drive-through windows. Their public address systems can compromise privacy. Limit use to transactions that are not sensitive and require minimal discussion.
5. Limit how proxies are used. Sometimes a relative or friend will serve as a proxy and pick up a prescription. To safeguard privacy, telephone the pharmacy to receive counseling. Restrict the role of the proxy to prescription pick-up and delivery.
6. Restrict the content of messages from the pharmacy. Pharmacies sometimes send refill reminders and messages by U.S. mail, electronic mail and telephone. Request that envelopes be used instead of postcards. Request that emails, messages left on answering machines or with others not include specific drug information.
7. Talk to the privacy officer. HIPAA requires that each pharmacy designate a privacy officer. This person manages compliance with HIPAA. Direct any complaints or requests to the privacy officer.

Tips & Warnings

• HIPAA requires all pharmacies to give their patients a notice of privacy practices (NOPP). This document describes disclosures of information and explains patients' rights. Most pharmacies request that patients sign their NOPP after reading it.