Virtual COVID-19 Support Groups (9,900) and HIPAA
Demand for virtual support groups for recovered COVID-19 patients continues to grow as more patients recover. Forced isolation has exacerbated patient depression, anxiety, and stress, causing many recovered patients to seek virtual support groups to cope.
Dr. William Sanderson, a psychologist and director of the Anxiety & Depression Clinic at Hofstra University states, “Some people have been removed from the ability to meet their common human needs — socialization, meaningful work, getting together with family. Every time you block people meeting their needs, it results in emotional distress.”
He furthered, “The concern that we have is that reactions to COVID that are mild could turn into disorders beyond the pandemic. Depression is a slippery slope down … we need to help these people now to avoid a bigger problem down the road.”
Since support groups fall under the category of “treatment” as per the HIPAA regulation, behavioral health professionals wishing to offer COVID-19 support groups must ensure that the groups are HIPAA compliant.
Support Groups and HIPAA
Much like a traditional support group, virtual support groups must comply with the HIPAA Privacy Rule. Under the Privacy Rule, providers have an obligation to safeguard patient’s protected health information (PHI). Since the inherent nature of support groups is for patients to share information with several other patients that are experiencing similar conditions, the privacy requirement is often overlooked.
However, providers still have to adhere to the minimum necessary standard when using or disclosing PHI, ensuring its confidentiality. This means that although patients are permitted to share their own PHI, providers are not permitted to disclose patients’ PHI to the group.
Virtual support groups must also ensure the integrity of PHI with security controls. As such, when choosing which telecommunications tool to use to host support groups, it is important that they have security measures in line with HIPAA standards.
- Access controls. Utilizes unique login credentials for each user to ensure that unauthorized users do not have access to closed sessions.
- Audit controls. Monitors access to PHI to ensure adherence to the minimum necessary standard.
- Masks sensitive data to ensure that it cannot be read by unauthorized users.
Lastly, telecommunications tools are considered business associates under HIPAA. As such, for the tech to be used for support groups, the tool must be willing to sign a business associate agreement (BAA). A BAA is a legal document that mandates the protections the business associate is required to have in place. Tools that are unwilling to sign a BAA cannot be used in conjunction with PHI, and therefore cannot be used to treat patients.
Need assistance with HIPAA compliance? Compliancy Group can help! They help you achieve HIPAA compliance with Compliance Coaches® guiding you through the entire process. Find out more about the HIPAA Seal of Compliance® and Compliancy Group. Get HIPAA compliant today!
Telehealth Training or Telemedicine Training?
If you are developing a hybrid telehealth model, now might be the right time to get serious about telehealth training. TBHI offers competency-based training from the convenience of your home or office Internet connection. Whatever your need, from basic telehealth to specialty topics, TBHI is the industry leader with online training to help you develop your evidence-based protocols, learn to be compliant with state, provincial and national laws, implement practical documentation shortcuts to legal and ethical compliance, and find the best technology to maximally protect your clients or patients.
Enjoy a step-by-step learning path that teaches you how to prevent as well as handle even the most difficult of clinical scenarios. All training is evidence-based and available online 24/7 through any device. Individual courses and webinars, as well as two micro certifications:
- Telehealth Clinical Best Practices Workshop — Live, interactive webinar, w/ 4 CME, or CE hours to discuss preventing and handling complex clinical issues. Training hours are applicable to legal/ethical licensure renewal requirements.
- 7 Effective Strategies for Managing Zoom Fatigue Symptoms
- Micro Certifications offer a broader range of legal and ethical grounding and allow you to distinguish yourself on websites, in social media, directories, and other areas.