Forum Moderators: LifeinAsia
In such a case, what sort of releases, if any, might be wise? I realize this is predominantly a legal question that should be run past the firm's counsel, but in general, has anyone dealt with such an issue?
Any thoughts would be appreciated.
If I were you, I would require that the client have his attorney draft the authorization (do NOT draft it yourself!), and you should also get a release from the client releasing you from liability and agreeing to defend you against any lawsuits or charges arising from the use of patient information.
When HIPAA was passed, I worked in public relations in the healthcare field, and I was very glad to get out. The requirements are wide-ranging and onerous, and the penalties can be draconian -- up to and including criminal prosecution for those involved.