flynnibus
Premium Member
HIPAA doesn't apply (for ed to IBCCES) because the disabled person is choosing to share their medical information.
Negative Ghostrider - The choice to share information with someone has ZERO impact on the organization's requirement to protect your information. What you are confusing is the idea of who you can share WITH.
The majority of HIPAA requirements are about ensuring your information is not UNINTENTIONALLY leaked - not just who they INTENTIONALLY share with. So just because you give your information to someone (like your employer or a hospital) that does not absolve them from their obligations.
What matters in this conversation context is if the entity is even required to follow HIPAA rules as a covered entity or not. Not everyone is.