Can a health provider (physical or mental) contact my family to ask them questions without my permission?
<p>Can a health provider (physical or mental) contact my family to ask them questions about me without my consent? Can they do it if they don't disclose their reasoning or any medical information and just start asking them questions?</p>

<p>For example, contacting your family and asking them if they have noticed certain symptoms you may have.</p>

<p>I'm an emergency medical technician in Vermont. In an emergency, information may be shared with anyone likely to be able to help. For example, I knock on a door and ask</p>

<p>"Did you call for an ambulance?"</p>

<p>"No."</p>

<p>"Is this 178 Lake drive?"</p>

<p>"No, this is 182."</p>

<p>"Do you know where 178 is?"</p>

<p>Questions by a health provider are very likely to reveal some health-related information about you. The mere fact that you have consulted a particular provider is generally considered protected health information (PHI). The nature of the question is likely to reveal additional info, unless perhaps it is asking only for demographic info such as your age, or contact info for you. Just what info would be revealed depends on the specific question or questions asked, but under HIPAA information may be considered to be &quot;revealed&quot; by implication, even if it is not explicitly stated. If someone hearing all of the question(s) asked could plausibly conclude something about your health, such as your diagnosis or symptoms, that such a person would not have known otherwise, then it has been revealed.</p>
<p>In general a provider may not reveal PHI without the consent of the patient. A parent or guardian may give consent for an underage child. The holder of a PoA or healthcare proxy may give consent if the document authorizes this. A guardian may consent for someone who is legally incompetent.</p>
<p>There are specific circumstances under which info may be revealed without consent. For example, it may be given to a billing service so that you can be billed. Info may be given to affiliated providers who are being consulted on your case. (for these you must be informed of the possibility in advance, usually when first seeing the provider.) It may be given to an insurance company so that a claim may be filed and paid. If there is reason to believe that you are a danger to yourself or others, info may be given to emergency services as needed. <strong>Edit:</strong> It may be shared for any reasonable purpose in the event of an emergency, and there are other exceptions.</p>
<p>And of course if you signed a consent form in advance, info may be given in accord with that form.</p>
<p><strong>Edit:</strong> None of the obvious exceptions seem to apply here, but without specifics one cannot be sure.</p>
<p>The potential penalties for violating HIPAA restrictions are quite sizable, although there is a great deal of discretion in what penalties will actually be imposed, if any.</p>

united-states privacy medical health