Protecting Patient Privacy and Confidentiality

As a member of the LifeCare team, you may have access to sensitive patient information. LifeCare of Florida is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA), and all workforce members, contractors, and affiliates must protect patient privacy and confidentiality.

Protected Health Information (PHI) includes any information that can identify a patient and relates to their health condition, treatment, or payment for services. PHI may be shared verbally, in writing, electronically, or through photographs and other records.

Your Responsibilities

As part of your role, you are expected to:

Understand Patient Privacy Rights

• LifeCare provides every patient with a Notice of Privacy Practices (NPP), which explains how their health information may be used and disclosed.

• Documentation that the notice was provided is included in the patient intake process.

• The NPP is available on the LifeCare website in both English and Spanish.

Protect PHI at All Times

• Your confidentiality obligations apply to all PHI you access, hear, view, create, transmit, or store while working with LifeCare.

• This responsibility continues regardless of whether the information is obtained verbally, on paper, electronically, through photographs, text messages, emails, or other means.

Access Information Only When Needed

• Access, use, or share PHI only when it is necessary to perform your job duties and provide patient care.

• Do not discuss patient information with family members, friends, other patients, or coworkers who do not have a legitimate need to know.

• Never share patient information in public places or through unsecured communication methods.

Follow Disclosure Requirements

• Any authorized disclosure of PHI must follow LifeCare policies and applicable HIPAA requirements.

• Required documentation must include what information was disclosed, why it was disclosed, and when the disclosure occurred.

Report Privacy or Security Concerns Immediately

• Report any actual or suspected privacy breach, unauthorized disclosure, lost device, misplaced records, or other security concern to LifeCare immediately.

• Prompt reporting helps protect patients and allows LifeCare to meet regulatory requirements.

Understand the Consequences of Non-Compliance

• Unauthorized access, use, or disclosure of PHI may result in corrective action, disciplinary measures, termination of employment or contract, and/or reporting to licensing boards or regulatory authorities.

• LifeCare will review all incidents and determine appropriate actions based on the circumstances, including whether the violation was accidental or intentional.

• Accidental violations may require retraining and corrective action. Intentional misuse of PHI may result in immediate termination and reporting to appropriate authorities.

Remember

Patient information is private. If you are unsure whether information may be accessed, used, or shared, do not proceed until you have consulted your supervisor, the Privacy Officer, or the Security Officer.

Protecting patient confidentiality is everyone's responsibility and is essential to maintaining trust, professionalism, and compliance with HIPAA.