HIPAA basics for students

What HIPAA protects

The HIPAA Privacy Rule sets national standards to protect individuals' medical records and other identifiable health information held by health plans, health care clearinghouses and most health care providers. Information that can identify a patient (name, date of birth, address, photos, record numbers and much more) is protected.

It applies to you

Federal rules define a covered entity's workforce to include trainees, not just employees. As a student on rotation you follow the site's privacy policies, and most schools require HIPAA training before your first day.

Everyday rules of thumb

• Minimum necessary: look at and share only the information you need for your task.
• Talk carefully: avoid discussing patients in elevators, hallways, cafeterias or anywhere others can hear.
• Paper and screens: don't leave notes or open charts where others can see them. Log out of systems.
• Your notes: leave out names and identifying details in anything you take home. Follow your school's rules for care plans and assignments.
• No photos or recordings of patients, charts or screens.

Social media

Don't post about patients, even without names. Details like a room, a diagnosis, a date or an unusual case can identify someone. If it happened at clinical, it stays at clinical. (The SHIFTit Breakroom follows the same rule: how we protect patients.)

If you make a mistake

Tell your instructor or preceptor right away. Sites have a process for privacy incidents, and reporting quickly is always the right call.