HIPAA - Resources - FAQ - conducting surveys

Resources - FAQ - conducting surveys

AHA News Question

Under HIPAA, can a hospital conduct surveys or questionnaires of patients to learn whether they were satisfied with the care they received and, if so, what requirements or limitations are there on such activities? Can a hospital hire a vendor to conduct the surveys?

Under the HIPAA privacy regulations, hospitals may conduct "quality assessment and improvement activities" as part of the hospital's health care operations. A survey or questionnaire that determines whether patients were satisfied with the quality of care they received would be a quality assessment and improvement activity and, therefore, considered health care operations. Before conducting these activities, however, the hospital must state in its notice of information practices that it may use identifiable health information for the hospital's health care operations. If a hospital agrees to a restriction on its use of a patient's health information, any use of information for health care operations, including patient surveys, would be limited by that restriction. In addition, if a patient makes a request for "confidential communications," for example, specifying how or where the hospital may contact the patient, the hospital must accommodate any reasonable request. Finally, state laws may limit the use of identifiable health information for these purposes. A hospital may hire a vendor to conduct the surveys on the hospital's behalf pursuant to a business associate agreement under HIPAA.

 

Related Resources

Letter/Comment
Public
Alex M. Azar Secretary U.S. Department of Health…
Letter/Comment
Public
The AHA recognizes that SAMHSA is statutorily constrained in making structural amendments to the regulations under 42 CFR Part 2; however, because the proposed…
Letter/Comment
On behalf of the nearly 5,000 member hospitals, health systems and other health care organizations, and our clinician partners – including more than 270,000…
Letter/Comment
Public
AHA comments on HHS' request for information on modifying Health Insurance Portability and Accountability Act of 1996 (HIPAA) rules to improve coordinated care…
Letter/Comment
Public
Letter/Comment
Public