Health Insurance Portability & Accountability Act Requirements of Registered Nurses

Established in 1996, the Health Insurance Portability and Accountability Act (HIPAA) protects patients' medical information. HIPAA prohibits violations of patient privacy and limits access to protected information to essential medical personnel, including registered nurses. Health care workers who fail to follow HIPAA policy can face fines of $250,000 and up to 10 years in jail.

Written/Electronic Protection of Privacy

• Nurses must respect all written confidential information about patients and use that information only as caregivers. All patient information is considered confidential, including name, date of birth, address and Social Security number.

Verbal Protection of Privacy

• Nurses must not reveal confidential patient information verbally in public. Speaking out loud about patient examinations, conditions or personal information is strictly prohibited.

Verification of Patient Identity

• Before releasing any information about patients, nurses must confirm the identity of the person requesting the information. Identity can be established by display of a photo ID or by giving name and date of birth.

Non-Retaliation Policy

• A nurse must report any observed violations of HIPAA. An employer cannot retaliate against a RN for reporting HIPAA violations. All health care facilities must have a policy to safeguard the rights of a person or worker who reports a violation of privacy. No action should be taken against a person or worker who, in good faith, files a complaint, testifies in court, or believes that an action is against the law.