To talk about the myths surrounding HIPAA and privacy, you have to first read what HIPAA actually says about privacy. The definition of “privacy” is the individual’s right to control access to and uses of identifiable personal information.
When the HIPAA Privacy Rule was first enacted by President Bush, it WAS in fact a privacy rule because it included YOUR right to control the uses and disclosures of YOUR protected health information. Here is what it said: “a covered health care provider must obtain the individual’s consent, in accordance with this section, prior to using or disclosing protected health information to carry out treatment, payment, or health care operations.” 65 Fed. Reg. 82,462