Q

HIPAA and Social Security numbers in a hospital computer network

Learn when Social Security numbers can be used for patient identification without violating HIPAA patient confidentiality requirements.

Currently, a hospital information system uses Social Security numbers as one of the key fields for patient identification. This system enables the merging of patients' info into an enterprise patient ID. Is the use of Social Security numbers by this system considered a HIPAA violation? If so, would redesigning the entire patient ID system be the only answer?

Use of Social Security numbers (SSNs) is not a violation of HIPAA unless the number is used in such a way that it is clearly exposed to the public. So, as an example, if an organization is using Social Security numbers as the patient identifier, the full ID cannot be displayed on member cards. Similarly, computer monitors need to be set up so that patients' Personal Health Information (PHI), including their SSNs and diagnoses, are not viewable by other patients or unauthorized personnel.

Without further information about what the enterprise patient IDs looks like, it is hard to say for certain that this is not a violation of HIPAA, but at first blush it sounds acceptable, especially if this ID is not being printed on ID cards.

For more information:

 

This was first published in January 2010

Dig deeper on HIPAA

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

SearchCloudComputing

ComputerWeekly

Close