In an American Association of Orthopaedic Executives brief, Todd McDonagh, COO of MedSafe/Total Compliance Solutions, a healthcare compliance company, laid out 10 steps that healthcare providers could take to ensure HIPAA compliance when using social media.
The 10 steps Mr. McDonagh suggests are:
1. Set up different accounts for communicating with friends and family and use different passwords to help differentiate the accounts.
2. Understand the nature of the social media platforms — they were created to help people connect with one another, broadcast their ideas and create stores of personal information online.
3. Understand the platform you are using and how it works, for example understanding the difference between using the "@" symbol and a direct message on Twitter could prevent the wrong information from getting into the wrong hands.
4. Periodically check your privacy settings, preferably once a week, as they can change.
5. Never refer to a patient by name and also be sure to not give out any information that could identify the patient.
6. When referencing particular cases, conditions or treatments, be as general as possible and do not describe specific demographics or populations that can be identified.
7. Never "friend" patients on Facebook, as this could lead to serious ethical issues, and consequently a violation of HIPAA.
8. Never post anything that you would be uncomfortable reading re-printed in the newspaper.
9. Take time to reflect on an email or tweet before sending it because more often than not, responses online are immediate.
10. Be careful about your tone as emails can't convey a feeling and written words can easily be misconstrued.
More Articles on HIPAA:
HIPAA Compliance: 5 Key Considerations for ASCs, Physician Practices and Small Providers
5 Steps to Take to Ensure HIPAA Compliance
Practical HIPAA Compliance for ASCs