Comment on CVS, Rite Aid, Walgreens hand out medical records to cops without warrants

• Jarlsburg@lemmy.world ⁨11⁩ ⁨months⁩ ago

  Yeah, I didn’t say any of that but ok. HIPAA actually requires you do give law enforcement information in a variety of situations, including specifically the situation I mentioned:

  To report PHI that the covered entity in good faith believes to be evidence of a crime that occurred on the covered entity’s premises (45 CFR 164.512(f)(5)).

  HHS - When does the Privacy Rule allow covered entities to disclose information to law enforcement

  source

  • mx_smith@lemmy.world ⁨11⁩ ⁨months⁩ ago

    Is that without a warrant? It wouldn’t be hard to impersonate a cop or even a cop with a grudge against someone to come find out what medications they are taking to dig further into someone’s lives and ruin said life.

    source

    • Jarlsburg@lemmy.world ⁨11⁩ ⁨months⁩ ago

      Yes, without a warrant. It’s in the Privacy Notice in any retail pharmacy.

      Impersonating a cop is a pretty big step that’s illegal in its own right but we did have moms trying to see if their adult daughter was on birth control, but that’s pretty easy to stop. Just lock their profile and ask the patient to make up a passcode or only deal with them in person.

      source

      • GnomeKat@lemmy.blahaj.zone ⁨11⁩ ⁨months⁩ ago

        bootlicker

        source