The law allows health-care facilities, insurance companies and other health-care providers to disclose some of a patient's information to a collection agency to collect a debt. HIPPA laws do not protect a patient from his billing information being shared. Once a patient receives a medical service, he has the obligation to pay for the services received. As with any other debt, if the debtor has not submitted payment or made payment arrangements, the lender or business can use various methods to collect the debt.
Type Of Information Disclosed
Under HIPPA laws, the information that can be shared with a collection agency is limited. The information that may be disclosed to a collection agency includes the debtor's name, address, Social Security number, date of birth, account number, payment history and the name and address of the health-care facility or provider. However, HIPPA laws do not allow the medical records to be submitted to a collection agency. The services a patient received are private, and those records may not be disclosed to a collection agency.
The same laws that apply to disputing credit cards and revolving accounts under the Fair Credit Billing Act do not apply to medical bills. A debtor still has the right to dispute any medical billing errors, but the dispute process is more complicated. The debtor should stay on top of his medical bills and dispute the debt before it is passed along to the collection agency.
HIPPA laws limit the people who can view a patient's medical information. However, when a patient owes a debt, the law does not limit who can view the debt information and how many times the information is viewed. A debtor does not have to be notified when her information is being disclosed to a collection agency. If the patient has medical debt, this information can be passed on to the collection agency without notice.
Filing A Complaint
If your privacy was violated by a covered entity, you can file a complaint. Contact the Office for Civil Rights, which investigates the complaint against the covered entities. The complaint must be written and can be filed by email, fax, through mail or electronically. When a person files a complaint against an entity, HIPAA regulations forbid the entity from retaliating against the person for filing the complaint.