When does medical privacy start?
<p>In a conversation between, say, Alice and Bob, if Bob shares his medical history with Alice, under which conditions is this information considered private medical information? </p>

<ul>
<li>If Alice <em>is</em> a physician? </li>
<li>If Bob <em>knows</em> that she is a physician?</li>
<li>If Bob <em>asks</em> for medical advice/treatment specifically (as opposed to, say, simply complaining about his health)?</li>
</ul>

<p>Generally speaking, is medical information shared in an informal context (e.g. chatting with a family friend who happens to be a doctor) as protected as information provided in official medical contexts (e.g. during an appointment in a hospital)?</p>

<p>(<em>Since no jurisdiction was given this answer will apply to US federal law</em>) </p>

<p><a href="https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/privruletxt.txt" rel="nofollow noreferrer"><strong>Hipaa</strong></a> lays out the standards for medical information privacy. The language of Hipaa is written in a way that clearly defines the relationship that two parties must have for the privacy of medical information to be protected.</p>

<p>Party A: "Health Care Provider" (Could be more then one person)</p>

<p>Party B: "Patient"</p>

<p>If Alice is not acting as bob's Health Care Provider then Alice has no obligation to protect Bob's medical information. </p>

<p>In addition, if Alice were to share Bob's medical information with Bob's friends, then Bob wouldn't have grounds to sue Alice under the Tort of "invasion of privacy" because Bob broke his own exception of privacy by willfully ,and intentionally disseminating his medical information.</p>

<p>Alice is safe from both criminal and civil action. </p>

privacy medical