What HIPAA addresses
HIPAA establishes requirements for protected health information handled by covered entities and their business associates. Its application depends on the organization and activity involved; a public health-related website is not automatically a clinical records system.
Before sharing health information
Ask your healthcare provider which communication channel to use for medical records and questions. Avoid posting sensitive information in public comments or social messages. Confirm who will have access to information shared during a clinical visit.
Your provider’s privacy notice
A healthcare provider’s Notice of Privacy Practices explains relevant uses and disclosures and how to exercise privacy rights. Review that notice and use the contact method it identifies for records requests or privacy concerns.
Privacy during a remote visit
Choose a private place, use a trusted connection, and tell the clinician if someone else is present. Ask about the privacy practices of the service you are using before sending documents or joining an appointment.
Further reading: HHS telehealth privacy guidance and informed consent information.