Examkin

Question

Difficulty: HardConfidentiality and Privacy

A 24-year-old man presents to an outpatient clinic for evaluation of a painless penile ulcer. He is diagnosed with primary syphilis and receives intramuscular benzathine penicillin G. The patient is a college student who is currently enrolled as a dependent on his father's employer-sponsored health insurance plan. During the visit, the patient expresses significant distress regarding his privacy. He states, "My father cannot find out about this. If he sees a claim for syphilis treatment on the insurance statement, he will cut me off financially." He explicitly asks the physician to ensure that absolutely no information about this visit is shared with the health insurance company or his father.

Which of the following is the most legally and ethically appropriate response by the physician regarding the patient's request?

  1. We can honor your request to restrict this information from your health plan, provided you pay for today's services in full out-of-pocket.Answer
  2. B
    Because you are enrolled as a dependent on your father's insurance, he acts as your surrogate for billing purposes, meaning we cannot restrict the claim information from him.
  3. C
    We can only restrict the disclosure if a judge has declared you legally competent to override the primary policyholder's access to the claims.
  4. D
    I must deny your request, as syphilis is a reportable condition, and we are legally mandated to report it to your health insurance provider for state tracking.
  5. E
    We must report this diagnosis to your father regardless of insurance billing, as mandatory reporting laws require notifying household members of highly contagious infections.

Answer

The physician should inform the patient that the clinic can restrict the disclosure of his visit to the health insurance plan only if he pays for the services in full out-of-pocket.
Under the HIPAA Omnibus Rule (45 CFR § 164.522(a)(1)(vi)), patients have the right to request that a covered entity restrict the disclosure of protected health information (PHI) to a health plan. The provider is legally mandated to agree to this restriction if the disclosure is for the purpose of carrying out payment or health care operations and pertains solely to a health care item or service for which the patient has paid the provider in full out-of-pocket. Therefore, the physician can guarantee that the information will be withheld from the insurance company, but only if the patient does not utilize the insurance to pay for the visit.

Step-by-Step Solution

1
Identify the patient's core conflict.
A competent adult dependent on his father's insurance wants to prevent the health plan from generating an Explanation of Benefits (EOB) that would reveal his STI diagnosis to the primary policyholder.
Understanding the exact mechanism of the potential privacy breach (the insurance claim process) is necessary to determine the legal remedy.
2
Recall the relevant HIPAA privacy rule regarding health insurance plans.
The HIPAA Omnibus Rule (2013) contains a specific provision for patients wishing to withhold information from their insurers.
HIPAA governs the release of protected health information for payment and healthcare operations.
3
Apply the out-of-pocket exception to the scenario.
A provider must honor a request to restrict disclosure of protected health information to a health plan if the disclosure is for payment purposes and the patient pays for the service in full out-of-pocket.
This is the only legally guaranteed way to prevent a health insurance company from processing a claim and subsequently notifying the primary policyholder.
4
Eliminate distractors related to inappropriate applications of medical ethics.
Reject options that incorrectly apply mandatory reporting (which goes to the state, not insurers or family) and surrogate hierarchy (which does not apply to competent adults).
These distractors represent common misconceptions regarding the limits and exceptions of patient confidentiality.

Key Concept

HIPAA Omnibus Rule: Patient right to restrict disclosures to health plans when paying out-of-pocket.
Rate this question

Topics

Confidentiality and Privacy

More questions from this topic