It’s important to know the difference between patient .
Consent generally means giving permission to have a medical procedure performed, or for medical information to be shared with doctors during treatment.
HIPAA’s “Privacy Rule” covers a person’s private health information, which includes medical bills, claim information, prescriptions, lab results, medical opinions, and all other protected forms of PHI.
The OCR found the HMO to be in direct violation of HIPAA.
Authorization generally means giving permission to have one’s PHI distributed to third parties, other than the original medical facility providing treatment.
To be a legitimate authorization, there must be a written document, signed by the patient, giving the named medical facility permission to use specific PHI for matters other than medical treatment, payment, or surgeries.
In the past, people with health problems were afraid if they left their jobs or were fired, they wouldn’t be able to get health insurance with their new employer, or if they were able to get insurance, their pre-existing condition would be excluded.
This meant if you started your new job with a pre-existing injury or illness, your new HMO or PPO could exclude coverage for that prior medical condition.