Contact Us
Categories
- FTC
- Emotional Support Animals
- Service Animals
- Employee Agreement
- Remote Work
- Federal Trade Commission
- LGBTQ
- Minors
- United States Department of Justice ("DOJ")
- Arbitration
- Work from Home
- Workplace health
- Intellectual Property
- Trade Secrets
- Corporate
- Center for Disease Control
- Americans with Disabilities Act ("ADA")
- FFCRA
- Opioid Epidemic
- Occupational Safety and Health Administration (“OSHA”)
- COVID-19
- IRS
- Temporary Leave
- Treasury
- Coronavirus
- Families First Coronavirus Response Act
- H.R.6201
- Health Care Law
- Paid Sick Leave
- Worker Misclassification
- Labor Law
- Overtime
- Kentucky Unemployment Insurance Commission
- Sexual Harassment
- FMLA Retaliation
- Overtime Rule
- Employer Wellness Programs
- Employment Non-Discrimination Act ("ENDA")
- Genetic Information Nondiscrimination Act ("GINA")
- Kentucky minimum wage
- Minimum wage
- Paid Time Off ("PTO")
- Sick Employees
- Wage and Hour
- Employee Benefits
- Employment Discrimination Laws
- ERISA
- Fair Labor Standards Act (FLSA)
- Human Resource Department
- Independent Contractors
- Kentucky Civil Rights Act (“KCRA”)
- OSHA
- Overtime Pay
- Social Media
- Social Media Policies
- U.S. Department of Labor
- Union
- ADA Amendments Act of 2008 (“ADAAA”)
- Adverse Employment Action
- Amazon
- Americans with Disabilities Act
- Bring Your Own Device
- BYOD
- Civil Rights
- Compliance
- Department of Health and Human Services
- Department of Labor ("DOL")
- EEOC
- Employee Handbook
- Employee Misconduct
- Employment Law
- Family and Medical Leave Act (“FMLA”)
- National Labor Relations Act (NLRA)
- National Labor Relations Board (NLRB)
- Portal-to-Portal Act of 1947
- Pregnancy Discrimination Act
- Security Screening
- Title VII of the 1964 Civil Rights Act
- U.S. Equal Employment Opportunity Commission (“EEOC”)
- U.S. Supreme Court
- Uncategorized
- Volunteer
- Young v. UPS
- Federal contractors
- Kentucky Labor Cabinet’s Occupational Safety and Health Program (KOSH)
- Micro-unit
- Security Checks
- Specialty Healthcare & Rehabilitation Center of Mobile
- Cloud
- Creech v. Brown
- EEOC v. Hill Country Farms
- Equal Employment Opportunity Commission v. Kaplan Higher Education Corp.
- Lane v. Franks
- Mine Safety and Health Administration ("MSHA")
- Non-exempt employees
- Northwestern
- Shazor v. Prof’l Transit Mgmt.
- Web Content Accessibility Guidelines
- Whistleblower
- WorkSmart Kentucky
- "Ban-the-box"
- 2013)
- At-will employment
- Berrier v. Bizer
- Bullying
- Chapter 11 Bankruptcy
- Chenzira v. Cincinnati Children’s Hospital Medical Center
- Citizens United v. Federal Election Commission
- COBRA
- Companionship services
- Compensatory time off
- Conestoga Woods Specialties v. Sebelius
- Consumer Credit Protection Act (“CCPA”)
- Crystalline Silica
- Davis-Bacon and Related Acts
- Defense of Marriage Act (“DOMA”)
- Drug-Free Workplaces
- Earnings
- EEOC v. Fabricut
- EEOC v. The Founders Pavilion
- Ehling v. Monmouth-Ocean Hospital Service Corp.
- Federal Stored Communications Act (“SCA”)
- Giant Food LLC
- Government employees
- Government shutdown
- Health-Contingent Wellness Programs
- HIPAA
- Home Health Care Workers
- Illness and Injury Reports
- Job applications
- Jury duty
- Kentucky Department of Workers’ Claims
- Kentucky Wage and Hour Act
- KYSHRM 2013
- Mandatory vaccination policies
- Maternity Leave
- McNamara O’Hara Service Contract Act
- Medical Exams
- NFL Bullying Scandal
- Participatory Wellness Programs
- Payroll
- Pension Plans
- Permissible Exposure Level ("PEL")
- Private employers
- Sebelius v. Hobby Lobby Stores
- Senate Bill 157
- SHRM
- Small Business Administration (SBA)
- United States v. Windsor
- Violence
- Wage garnishment
- Contraceptive Mandate
- Defamation
- Employee Arrests
- Employee Forms
- Employee Hazards
- Employee of the Month Programs
- Employee photographs
- Employee Training
- Employer Group Health Plans
- Employer Mandate
- Employment Practices Liability Insurance
- Endorsements
- Federal Workplace Agencies
- FICA
- Form I-9
- Freedom of Speech
- Gatto v. United Airlines and allied Aviation Services
- House Labor and Industry Committee
- KRS 391.170
- Litigation
- Madry v. Gibraltar National Corporation
- Megivern v. Glacier Hills Incorporated
- Motivating Factor
- Obesity
- Online Account Protection
- Online Defamation
- Patient Protection and Affordable Care Act
- Pennington v. Wagner’s Pharmacy
- Play or Pay
- Posting Requirements
- Record Retention
- Reference checks
- Religious Employer
- Right to Work Bill
- Sequester
- Severance Pay
- Social Media Ownership
- Supervisor
- Supplemental Unemployment Compensation Benefits
- Tangible employment actions
- Tax Refund
- Telecommuting
- Title VII retaliation cases
- Troyer v. T.John.E Productions
- U.S. Citizenship and Immigration Services
- Unfair Labor Practice
- United States v. Quality Stores
- University of Texas Southwestern Medical Center v. Nassar
- Vance v. Ball State University
- White v. Baptist Memorial Health Care Corp.
- Crisis Management
- Job Description
- Job Requirement
- Kentucky’s Whistleblower Act
- Labor and Pensions ("HELP")
- Municipal Liability
- PhoneDog v. Kravitz
- Public Sector Liability
- Social Networking Online Protection Act (SNOP)
- Social Privacy Laws
- Strategic Enforcement Plan (SEP)
- Wilson v. City of Central City
- Workplace Politics
- Business Insurance
- Class Action Waivers
- Criminal Background Checks
- Employee Performance Reviews
- Employee Personnel Files
- Federal Arbitration Act (FAA)
- Federal Department of Labor
- Hiring and Firing
- Hosanna-Tabor Opinion
- Informal Discussion Letter (“EEOC Letter”)
- Insurance Coverage
- Kentucky Labor Cabinet
- National Labor Relations Act
- Retaliation by Association
- Salary Threshold
- Unemployment Benefits
- Workplace Discrimination, Harassment and Retaliation
- Communications Decency Act
- Employee Contracts
- Internet & Media Law
- Internet Defamation
- Non-Compete Agreement
- Uniformed Services Employment and Reemployment Rights Act
- USERRA
HIPAA Considerations In The Event Of Employee Death or Incapacitation
The Health Insurance Portability and Accountability Act of 1996, otherwise known as HIPAA, acts in part to provide federal protection for identifiable health information retained by covered entities, which includes most businesses that offer company health plans. While many employers have policies and procedures in place to ensure HIPAA compliance in routine, every day matters relating to the management of employee health data, few employers have developed policies or even considered how to manage protected health information in the unfortunate event of employee death or incapacitation.
Importantly, HIPAA's protection of identifiable health information does not expire in the event of incapacitation or even the death of an employee. In fact, HIPAA continues to protect identifiable health information for 50 years after death. Consequently, it is important for employers to know to whom protected health information may be disseminated during this time period in order to continue to ensure compliance and avoid the assessment of steep penalties and fines.
Covered health information for the deceased or incapacitated employee during this time may be released to their legal representative under state law. In most instances involving a diseased employee, this would be the appointed administrator of the deceased's estate. It is permissible to release protected health information to non-representative family members, including but not limited to spouses, domestic partners, parents, children, or siblings, unless doing so is inconsistent with any prior expressed preference that is known to the covered entity. However, the information released to a non-representative family member must be limited to that information which is relevant to that person’s involvement in the decedent’s or incapacitated employee's care or payment for care. The regulations leave the determination of this relevancy up to the entity’s “professional judgment.” 45 CFR 164.510(b)(5).
The Department of Health and Human Services gives the following example of what could be released: “For example, a covered health care provider could describe the circumstances that led to an individual’s death with the decedent’s sister who is asking about her sibling’s death. In addition, a covered health care provider or pharmacy could disclose billing information or records to a family member of a decedent who is assisting with closing a decedent’s estate. However, in both cases, a provider generally should not share information about past, unrelated medical problems.” (Click here to directed to The Department of Health and Human Services website.)
Consequently, unless protected information is requested by the legal representative of the deceased’s estate, or the information requested is directly related to the requestor's involvement in the deceased’s care prior to death or payment for the deceased’s care prior to death, a signed HIPAA release by the legal representative is required prior to release of the protected information. Other exceptions allowing the release of protected health information covering special situations are also available, including the allowance of release to law enforcement to assist in a criminal investigation.
It is important that employers understand their responsibilities to protect identifiable health information covered by HIPAA and develop policies to ensure compliance. For assistance in developing a plan for your business, please contact a McBrayer employment attorney today.
Services may be performed by others.
This article does not constitute legal advice.