[Mailman-Users] HIPAA compliant?

2004-04-22 Thread Dr. Jones
Anyone on the list involved with HIPAA, in healthcare records?

I am a chiropractor and am wondering about using a mailing list among 
patients, not wanting to create any problems or HIPAA violations.

Any pitfalls to watch out for?

Dr. Jones

--
Dr. Scott S. Jones
Hands-On Chiropractic 
IRC: irc.freenode.net #utah
Yahoo: sanchiro12



--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


Re: [Mailman-Users] HIPAA compliant?

2004-04-22 Thread Sean Collen
A mailing list would not be HIPPA compliant. Then again it may be, but  
it depends highly on the reasoning and use of the list.

Sean Collen
Chief Systems Administrator
10 Empire State Blvd
Capitol Corporate Campus
Castleton, NY 12033
518-479-1226
518-479-5100
 
--
	www.aanet.org
 
--
On Apr 22, 2004, at 2:34 PM, Dr. Jones wrote:

Anyone on the list involved with HIPAA, in healthcare records?

I am a chiropractor and am wondering about using a mailing list among  
patients, not wanting to create any problems or HIPAA violations.

Any pitfalls to watch out for?

Dr. Jones

--
Dr. Scott S. Jones
Hands-On Chiropractic IRC: irc.freenode.net #utah
Yahoo: sanchiro12


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives:  
http://www.mail-archive.com/mailman-users%40python.org/



--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


Re: [Mailman-Users] HIPAA compliant?

2004-04-22 Thread Dr. Jones
Sean:



A mailing list would not be HIPPA compliant. Then again it may be, 
but  it depends highly on the reasoning and use of the list.
Here's my high reasoning, why it would not. If I keep it a moderated 
list, and the list members' names are not published to the list, i.e., 
on member on the list can't really find out the identity of any other 
list member, then I would think the privacy issue is covered.

As for use of the list, my use of it would be to disseminate health 
information to my patients. A side purpose would be to generate 
discussion about healthcare, and hopefully encourage others on the list 
to reply to and comment on the postings of some other members. I would 
NOT be including individual member addresses on the list for public 
distribution, just what people had written. If one user wanted to 
contact another it would be solely at the discretion of the "another" 
user

With this clarification, would it seem more 'compliant'? I read about 
MD's conducting group classes to instruct several patients at one time. 
I don't read anywhere about each patient being blindfolded, or being 
instructed to never utter their own names outloud in such sessions.

?

 
--
On Apr 22, 2004, at 2:34 PM, Dr. Jones wrote:

Anyone on the list involved with HIPAA, in healthcare records?

I am a chiropractor and am wondering about using a mailing list 
among  patients, not wanting to create any problems or HIPAA violations.

Any pitfalls to watch out for?

Dr. Jones

--
Dr. Scott S. Jones
Hands-On Chiropractic IRC: irc.freenode.net #utah
Yahoo: sanchiro12


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives:  
http://www.mail-archive.com/mailman-users%40python.org/





--
Dr. Scott S. Jones
Hands-On Chiropractic 
IRC: irc.freenode.net #utah
Yahoo: sanchiro12



--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


Re: [Mailman-Users] HIPAA compliant?

2004-04-22 Thread Sean Collen
Yes, that is fine, I run a list like that now for the National Kidney  
Foundation. A place for an administrator to send out health info, and a  
place for everyone to have discussions on different issues and such.

We have not had any issues with HIPPA up to now, and many of our  
members/clients have already been audited by those HIPPA compliancy  
groups.

Sean Collen
Chief Systems Administrator
10 Empire State Blvd
Capitol Corporate Campus
Castleton, NY 12033
518-479-1226
518-479-5100
 
--
	www.aanet.org
 
--
On Apr 22, 2004, at 3:48 PM, Dr. Jones wrote:

Sean:



A mailing list would not be HIPPA compliant. Then again it may be,  
but  it depends highly on the reasoning and use of the list.
Here's my high reasoning, why it would not. If I keep it a moderated  
list, and the list members' names are not published to the list, i.e.,  
on member on the list can't really find out the identity of any other  
list member, then I would think the privacy issue is covered.

As for use of the list, my use of it would be to disseminate health  
information to my patients. A side purpose would be to generate  
discussion about healthcare, and hopefully encourage others on the  
list to reply to and comment on the postings of some other members. I  
would NOT be including individual member addresses on the list for  
public distribution, just what people had written. If one user wanted  
to contact another it would be solely at the discretion of the  
"another" user

With this clarification, would it seem more 'compliant'? I read about  
MD's conducting group classes to instruct several patients at one  
time. I don't read anywhere about each patient being blindfolded, or  
being instructed to never utter their own names outloud in such  
sessions.

?

-- 
-- --
On Apr 22, 2004, at 2:34 PM, Dr. Jones wrote:

Anyone on the list involved with HIPAA, in healthcare records?

I am a chiropractor and am wondering about using a mailing list  
among  patients, not wanting to create any problems or HIPAA  
violations.

Any pitfalls to watch out for?

Dr. Jones

--
Dr. Scott S. Jones
Hands-On Chiropractic IRC: irc.freenode.net #utah
Yahoo: sanchiro12


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives:   
http://www.mail-archive.com/mailman-users%40python.org/





--
Dr. Scott S. Jones
Hands-On Chiropractic IRC: irc.freenode.net #utah
Yahoo: sanchiro12




--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


Re: [Mailman-Users] HIPAA compliant?

2004-04-22 Thread texas critter - mailman-users
Dr. Jones wrote:

> Anyone on the list involved with HIPAA, in healthcare records?
>
> I am a chiropractor and am wondering about using a mailing list among
> patients, not wanting to create any problems or HIPAA violations.

I don't know the legal ramifications, but here's my two cents.  If it's
just an announcement list, for you to send out health info, absolutely no
problem.  Don't make the member list public, make it just for list admins
and you're fine, there's no disclosure of the other patients at all.  If
you've got email addresses for your patients now, you could send out a one
time message, announcing the list and its purpose and stating that if they
want to join, to go to the website or to send an email to, etc.  After
that, just make sure that when patients fill in their email address on one
of your forms or wherever, that it says that you're going to add them to
your mailing list.

If it's going to be discussion tho, make sure that your patients know, make
it very clear in the initial one time message.  Posting to a discussion
list will reveal the patient's email address and possibly their identity,
home address, phone number, etc. depending on how much info is publicly
tied to their email address.  So just be sure they know it's a discussion
list and that in posting, they may be revealing their identity.  Also, I
suggest making the list confirm + approve, so that you can verify that
people wanting to join are current patients - or if you're going to make it
open to the public, make sure your patients know that.

You might also consider having two lists, one for announcements only and
one for discussion and announcements and on whatever your patients fill in
their email address, add a couple checkboxes for the announcement list and
the discussion/announcement list.

hth,
texas critter

--
EL-M FAQ: http://www.emaillist-managers.com/



--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/