HIPAA Regulations Policy
Confidentiality of patient information is a core component of professionalism. All Feinberg students must abide by the Standards for Privacy of Individually Identifiable Health Information (“Privacy Rule”), developed by the Department of Health and Human Services as part of the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") as detailed at: https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html.
Materials regarding HIPAA responsibilities and requirements are distributed to students during orientation week of the M1 year at a mandatory HIPAA training session and again electronically as a refresher during Introduction to Phase 2 during the M2 year. All students must attest that they have read and will abide by the HIPAA privacy regulations before any patient contact occurs. Attestations will be collected during orientation week of the M1 year and again during Introduction to Phase 2 at the end of the M2 year.
Students should be aware that all FSM affiliated clinical affiliates perform technology enhanced active surveillance of who has accessed medical records. Similar to faculty, staff and residents, any Feinberg student who has been found to access a patient’s medical record without a legitimate clinical reason to do so will face disciplinary action at the clinical site and medical school up to and including possible dismissal from medical school.
Related LCME Standard
3.5 Learning Environment/Professionalism
Last Updated: 1/28/2019