Virginia subrogation attorneys need to familiarize themselves with the ways HIPAA compliance and General District Court discovery, namely the subpoena duces tecum, interact and ultimately impact healthcare subrogation practices in Virginia. By addressing whether a subpoena duces tecum request is both served properly and is HIPAA compliant, the Virginia healthcare subrogator can avoid any ethical or procedural pitfalls.
Is There Proper Service?
It is imperative that Virginia healthcare subrogation counsel ensure that service of the subpoena duces tecum conforms to the rules of their state, the federal rules, and that of the state it was served from. If a request is received from another jurisdiction then the Virginia healthcare subrogation attorney need only Google search the jurisdiction’s rules to pull them up. Upon determination that the subpoena duces tecum does not conform to the applicable rules, then the Virginia subrogation attorney cannot legally respond to them.
Is the Subpoena HIPAA Compliant?
The Virginia subrogation attorney would be wise to double and triple check that the subpoena duces tecum conforms to HIPAA regulations. Violation of HIPAA carries stiff penalties, namely civil penalties up to $1.5 million in annual fines and criminal penalties of up to ten years imprisonment for “covered entities.” This leads to the next issue:
Are You a Covered Entity Under HIPAA?
45 CFR 160.103 defines covered entities as a “health plan, health care clearing house, or a health care provider who transmits any health care information in electronic form.” If you are a Virginia healthcare subrogation attorney you are likely considered a covered entity or an agent for a covered entity under HIPAA regulations.
Is There a Valid Authorization For Disclosure?
Under HIPPA, a “valid authorization” is one that contains expressed written consent signed by the patient or their legal guardian for a specified purpose. This consent must include a detailed description of what records are referred to and what purpose they are to be used.
Conclusions for the Virginia Healthcare Subrogation Attorney
Upon receipt of any subpoena duces tecum for health records the Virginia healthcare subrogation attorney need only remember two things: process and HIPAA. If both are complied with then it is safe to respond, if however, one or both are not complied with then the Virginia subrogation attorney cannot respond to the subpoena duces tecum.
Editor:
Justin McLeod, Esq.
Associate
Chaplin & Gonet