Monday, March 30, 2020

OSHA vs HIPAA

Got this from our primary P&C carrier:

"Employers must report COVID-19 illness in workplace."

Which makes sense, but (as I pointed out at that post) seems to contradict HIPAA/privacy requirements, as well as guidance we noted the other day:
"Applicable law limits Anthem’s ability to share an individual’s protected health information with an employer absent an authorization or certain extenuating circumstances. As a result, Anthem is limited by law in its ability to disclose individual’s protected health information to an employer."

So how to square that circle?
blog comments powered by Disqus