Privacy Issues in the Community College Workplace

With limited exceptions, the CMIA prohibits an employer from using or disclosing (or knowingly permitting its employees or agents to use or disclose) medical information relating to an employee unless the employee first signs a valid authorization. For purposes of the CMIA, medical information is defined as,

“any individually identifiable information, in electronic or physical form, in possession of or derived from a provider of health care, health care service plan, pharmaceutical company, or contractor regarding a patient’s medical history, mental or physical condition, or treatment. ‘Individually identifiable’ means that the medical information includes or contains any element of personal identifying information sufficient to allow identification of the individual, such as the person’s name, address, electronic mail address, telephone number or social security number, or any information that, alone or in combination with other publicly available information, reveals he individual’s identity.” 124

2. H EALTH I NSURANCE P ORTABILITY AND A CCOUNTABILITY A CT (HIPAA) The Department of Human and Health Services (DHHS) under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), PL 104-191, 110 Stat 1936, enacted regulations protecting medical information. The federal regulations, entitled Standards for Privacy of Individuality Identifiable Health Information (Privacy Rule), protect individually identifiable health information of patients and, in some cases, employees. In particular, the Privacy Rule imposes standards regarding the rights of individuals who are the subjects of individually identifiable health information. The Privacy Rule also contains standards regarding the authorized and required uses and disclosures of this information by covered entities, and imposes several administrative burdens and onerous penalties for non-compliance. 3. T HE F AIR E MPLOYMENT AND H OUSING A CT (FEHA) The Fair Employment and Housing Act (FEHA), California Government Code sections 12900, et seq., generally prohibits employment discrimination on the basis of, among other things, an employee’s physical/mental disability or medical condition. The FEHA is relevant in the context of a discussion of the confidentiality of medical records because it restricts the ability of employers to inquire about the medical condition and medical history of prospective and current employees. A violation constitutes an unlawful employment practice and may give rise to liability. 125

Privacy Issues in the Community College Workplace ©2019 (c) Liebert Cassidy Whitmore 43