Adhering to HIPAA guidelines and rules is of the utmost importance to a healthcare professional. However, with technology and social media, this isn’t always easy. Social media platforms are great ways to interact with other travel nurses and make friends with nurses on the other side of the world. They’re also a great tool for keeping in touch with family and friends while away on an assignment.
Social media continues to grow. The number of social media users in 2018 was 3.196 billion, up 13 percent from the previous year. For many travel nurses, social media has become a place to “vent” or share experiences. But at what point does “venting” or sharing become HIPAA violations?
One of the most common social media HIPAA violations includes posting patient gossip.
The HIPAA Privacy Rule prohibits the use of PHI on social media networks. That includes; any text about specific patients and images or videos that could result in a patient being identified. It is easy to think you aren’t doing any harm because you aren’t mentioning names; however, certain details could give away who is being discussed. There have been instances where only slight details were given in the post, but that was enough for others and even the media to pick up on who was being discussed.
Some of the things you witness are hard to keep to yourself.
Wanting to share these experiences is understandable. With social media at our fingertips, it is typically the place we turn to first, thanks to our phones. Even if it is a “private” post, it isn’t always private. People often screenshot posts and share them on their own.
While you may not mention where the experience happened, if you have your place of employment listed on your profile or shared your most recent assignment, it won’t be hard to figure out where it happened. All it takes is one person to tip that hospital or facility off that you posted something. That could put your assignment and license in jeopardy, but you could also face fines.
Here are some tips that Healthcare Compliance Pros suggest considering before making a post on social media in regard to HIPAA violations:
Know the difference between personal and professional use.
Personal use of social media is often referred to as social media use on an account that is registered to an individual that is not used for business purposes.
Professional use is generally using social media for approved business purposes on behalf of an account registered to an organization, practice, or provider. You may have language in place in a social medial policy that states if personal use of social media is or is not permitted during business hours. Your policy may also explain the professional use of social media on behalf of the organization, practice, or provider; in other words, who should post, who should update, what should be posted, etc.
Understand if there are any risks involved with what you are about to post.
Whether posting on your personal account or a professional account, it is important to understand any risks. For example, if you post something, there may be a risk of receiving negative feedback from the public. There may be a risk of sharing proprietary information or content that could get into the hands of someone with malicious intent. Some tips to mitigate risk include posting accurate information, respectfully disagreeing with negative comments, etc.
Remember, communication on social media is powerful.
Just recently, the power of social media has been on full display. Social media allows information to be communicated almost instantly to a broad audience and may be communicated worldwide. Understand when you work for a professional organization, what you post on your personal social media sites may potentially have an impact on your professional reputation. Before you post, consider if anything you are sharing could impact you, your patient’s privacy, or your organization in any way.
Social media can be a great way to improve patient care and coordination. However, if it isn’t used with caution, HIPAA violations can happen. As a federal mandate, all healthcare facilities have HIPAA Privacy and security policies in place. Familiarize yourself with these. They will tell you what you should or should not be posting about on social media.
The National Council of State Boards of Nursing offers some advice on posting on social media as well.
