• Jarlsburg@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    11 months ago

    Yeah, I didn’t say any of that but ok. HIPAA/employers actually require you to give law enforcement information in a variety of situations, including specifically the situation I mentioned:

    To report PHI that the covered entity in good faith believes to be evidence of a crime that occurred on the covered entity’s premises (45 CFR 164.512(f)(5)).

    HHS - When does the Privacy Rule allow covered entities to disclose information to law enforcement

    • mx_smith@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      11 months ago

      Is that without a warrant? It wouldn’t be hard to impersonate a cop or even a cop with a grudge against someone to come find out what medications they are taking to dig further into someone’s lives and ruin said life.

      • Jarlsburg@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        11 months ago

        Yes, without a warrant. It’s in the Privacy Notice in any retail pharmacy.

        Impersonating a cop is a pretty big step that’s illegal in its own right but we did have moms trying to see if their adult daughter was on birth control, but that’s pretty easy to stop. Just lock their profile and ask the patient to make up a passcode or only deal with them in person.