Koolau
Give me a museum and I'll fill it. (Picasso) Give me a forum ...
Just got back from the Doc's office. Each time one visits this particular clinic, the staff "extracts" all the same info (medical insurance cards, phone, address, blah, blah, and etc.) I had been two weeks ago and went through the same "inquisition" with the exact same staff for the exact same doctor. But that's not what I want to talk about. Following the 15 minutes of wasted time (theirs and mine) I was given a 3 page form which contained all of my info, including meds and significant past procedures and conditions. I was supposed to review it and then keep or destroy at my will if it was all correct. Since I had just reviewed the same info 2 weeks prior, I asked the staff to shred it. Apparently, they did not. As I was waiting for my appointment, an old buddy from my previous w*rk came in just after I did. He went through the same process and was then handed the form to review. We sat and talked for perhaps 15 minutes when I accidentally glanced at his 3 page form. Unfortunately, it was not his - it was mine. I mentioned it to him and he went back to the staff who eventually found his form in the regular trash. I assume that's where mine went upon its return.
At another doctor I see on a regular basis, they have a fairly similar procedure of inquisition followed by a review form. BUT on their form, the SS number is listed. I once asked why and they said it was needed for billing. I asked if the doctor or his staff actually had to input my SS each time or didn't their computer have that number already (since it is capable of printing it out correctly each time.)? They shrugged. I noticed shortly thereafter that the forms, which are given to the doctor's nurse or other assistant upon being called back to the office ALL end up in an (for want of a better term) "in-out" box. The office area is often unattended and I considered simply confiscating the few dozen forms from the "box" - just to see if it got their attention. I'm sure that would have been illegal though it would be easy to avoid detection. I did NOT ever do it (though I could have at the time of any doctor visit.)
At another clinic I used to visit, the procedure included a photo copy of DL and all insurance cards (including Medicare.) Once again, the resulting copies were placed in a similar "box" where pretty much ANYONE - not just other clients - could have access. No security of any kind was in place other than having staff behind the counter most (not all) of the time.
I have pushed back on all of these situations to one extent or another - going so far as to sit down with one of the clinic's administrators - that time about the SSN being prominently displayed on every form. I have been totally rebuffed and pretty much told (in a nice way) "If you don't like it, go someplace else." Currently, I black out my SSN on that one form mentioned above. No problem after doing this for several years now - sure enough, I DO actually get billed - EVERY time. Go figure.
I bring all this up because, clearly, none of these places takes medical privacy seriously. The 3 clinics are spread across the country, so this is not "isolated" apparently. Perhaps more importantly, with the info contained on these forms, ID theft would be child's play for anyone with the nerve to steal a hand full of forms occasionally. SSN, DOB, Address, Age, Full Name, Insurance info, etc. are all available on the forms in one convenient "ID-Theft" package. I mentioned this to one clinic and still got "the shrug". I am seriously considering making a "big deal" out of the most recent event in which my info was handed to someone else. I think I would have a case, but don't know if it would be worth the effort nor whether it would actually change behavior - even at THAT clinic.
Curious if others have "stories" to tell or advice on how such routine privacy breaches should be handled. I'm certain that YMMV.
At another doctor I see on a regular basis, they have a fairly similar procedure of inquisition followed by a review form. BUT on their form, the SS number is listed. I once asked why and they said it was needed for billing. I asked if the doctor or his staff actually had to input my SS each time or didn't their computer have that number already (since it is capable of printing it out correctly each time.)? They shrugged. I noticed shortly thereafter that the forms, which are given to the doctor's nurse or other assistant upon being called back to the office ALL end up in an (for want of a better term) "in-out" box. The office area is often unattended and I considered simply confiscating the few dozen forms from the "box" - just to see if it got their attention. I'm sure that would have been illegal though it would be easy to avoid detection. I did NOT ever do it (though I could have at the time of any doctor visit.)
At another clinic I used to visit, the procedure included a photo copy of DL and all insurance cards (including Medicare.) Once again, the resulting copies were placed in a similar "box" where pretty much ANYONE - not just other clients - could have access. No security of any kind was in place other than having staff behind the counter most (not all) of the time.
I have pushed back on all of these situations to one extent or another - going so far as to sit down with one of the clinic's administrators - that time about the SSN being prominently displayed on every form. I have been totally rebuffed and pretty much told (in a nice way) "If you don't like it, go someplace else." Currently, I black out my SSN on that one form mentioned above. No problem after doing this for several years now - sure enough, I DO actually get billed - EVERY time. Go figure.
I bring all this up because, clearly, none of these places takes medical privacy seriously. The 3 clinics are spread across the country, so this is not "isolated" apparently. Perhaps more importantly, with the info contained on these forms, ID theft would be child's play for anyone with the nerve to steal a hand full of forms occasionally. SSN, DOB, Address, Age, Full Name, Insurance info, etc. are all available on the forms in one convenient "ID-Theft" package. I mentioned this to one clinic and still got "the shrug". I am seriously considering making a "big deal" out of the most recent event in which my info was handed to someone else. I think I would have a case, but don't know if it would be worth the effort nor whether it would actually change behavior - even at THAT clinic.
Curious if others have "stories" to tell or advice on how such routine privacy breaches should be handled. I'm certain that YMMV.
Kind of like a "Meh" event. (not saying you should do this though)
