HIPAA - Guidance: When A Co-Worker Is A UCH Patient

GUIDANCE (Oct. 2006)

WHEN A CO-WORKER IS A UCH PATIENT

As a Medical Center employee you might find out, either through word of mouth or observation, that a current or former co-worker is a UCMC patient. Once you become aware of the information, you may want to contact or visit the patient to see how he/she is doing out of concern. However, under the laws that govern patient privacy, your first obligation is to respect and protect your co-workers' privacy.

When your co-worker is a patient, treat him/her just like any other patient. Your co-worker is entitled to and deserves the same privacy and confidentiality that you would give to any other patient. In order to respect and protect your co-worker's privacy, you must follow these guidelines:

If you are directly involved in the co-worker's treatment or care (e.g. physician, nurse):

Only access protected health information (PHI) related to the reason why you are involved in the co-worker's care.
Only share PHI with the treatment team and if the patient has given permission, with the patient's family/friends.
Do not share the information, including the fact that the co-worker is a patient, with your family, friends, and other co-workers.

If you are not directly involved in the co-worker's treatment or care:

Keep the fact that the co-worker is a UCMC patient to yourself unless the co-worker has expressly asked you to share this fact with another person.
Do not share information you may know (e.g. room location, diagnosis) with any other individuals - including your family, friends, and co-workers.
Do not access or look at the co-worker's PHI - even out of concern.
Do not stop by to visit the co-worker without first checking at the nurses' station to confirm that the co-worker approves your visit.
Do not ask individuals involved in the co-worker's care for information.

Consider the courtesy you would expect, if you were a patient and did not want co-workers accessing your PHI, discussing your situation, or coming to visit you without your explicit permission.

Contact the HIPAA Program Office a 4-9716 with questions.

Back to Guidances