Article
Tip of the Week: HIPAA Intertwines with Myriad Aspects of Practice
Author(s):
Practicing according to HIPAA standards, though, is not just to protect yourself legally, but it is the right thing to do by way of patient care, particularly through the ethical tenets of beneficence and patient autonomy.
The Health Insurance Portability and Accountability Act (HIPAA) is 1 of many laws and regulations with which pharmacies must comply. Failing to do so can result in extraordinary fines, termination by an employer, suspension or revocation of licensure, and long-lasting career damage.
Practicing according to HIPAA standards, though, is not just to protect yourself legally, but it is the right thing to do by way of patient care, particularly through the ethical tenets of beneficence and patient autonomy. HIPAA extends to many aspects of practice, not just the obvious maintenance of confidentiality preventing you from discussing patient-protected information with others not involved in the patient's treatment.
In a Duke Law Journal article on prescription drug policing, the author reviews some issues that operate at the intersection of privacy law, Fourth Amendment doctrine, and public health realities triggered by the United States drug overdose epidemic.1 Reputable reporting sources and public health scholars frame this ongoing overdose crisis as a prescription drug overdose problem attributable to the overprescribing of opioid analgesics. The author claims that this narrative runs counter to epidemiological data, which indicate that the majority of American overdose deaths are now a result of illicit drug use and not prescription drug abuse. However, this has sparked the rapid rise of law enforcement and regulatory surveillance of prescribers and patients in the form of state prescription drug monitoring program (PDMP) databases.
State PDMPs, which maintain and analyze significant data concerning every dispensed prescription, collect a wealth of patient-protected health information (PHI). The author states that PDMPs are largely criminal and regulatory law enforcement tools dressed up in public health. Under the guise of rogue prescriber, pill mill, and doctor shopper crack downs, the Drug Enforcement Administration (DEA) has made it a routine practice to self-issue administrative subpoenas to conduct sweeps of sensitive protected health data stored in state PDMP databases. This widespread law enforcement prescribing surveillance tactic, which reveals highly personal health information, including patients’ contraceptive histories, gender transition decisions, and HIV diagnoses, raises serious constitutional privacy concerns.
The Supreme Court’s recent Fourth Amendment decision, Carpenter v. United States, however, may limit law enforcement’s ability to continue to access troves of electronically stored patient prescribing-related PHI in the custody of a state regulatory agency without a court order supported by probable cause. The article author highlights that pertinent pre-Carpenter precedent requires the DEA to obtain a Fourth Amendment warrant to conduct sweeps of state PDMP databases searching patient protected health information and that courts are even more likely to rule that warrantless DEA searches of sensitive and frequently revealing health care data run afoul of the Fourth Amendment in the post-Carpenter world. Simply stated, PDMP protected health information is entitled to Fourth Amendment warrant protection.
This court case mainly pertains to PDMP programs, but there are takeaways here for pharmacists and pharmacy managers. First, HIPAA is a powerful, strongly enforced federal law that in court cases trumps other regulations when 2 or more laws or regulations might be at odds. Second, patient right to privacy, then, is absolutely paramount. Third, while pharmacy managers cannot know the result of every court case, there are various sources, particularly good continuing education updates, that keep them abreast of legal trends that dictate practice. Finally, pharmacy managers should have knowledge of epidemiological data, and be able to reflect and look at all sides of complicated health care issues.
Additional information about medication therapy management and management functions can be found in Pharmacy Management: Essentials for All Practice Settings, 5e. You or your institution can subscribe to AccessPharmacy to access the textbook.
Shane P. Desselle, RPh, PhD, FAPhA, Professor of Social/Behavioral Pharmacy at Touro University California.
REFERENCES
Oliva JD. Prescription drug policing: The right to protected information privacy pre- and post-Carpenter. Duke Law Journal. 2018(69)5;775. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3225000&download=yes. Revised April 22, 2020. Accessed July 8, 2020.
