Days after he was forced to walk back several of his public statements about President Donald Trump’s diagnosis and treatment, White House Dr. Sean Conley refused on Monday to answer several questions about the president’s health several days after testing positive for COVID-19. When declining to answer certain questions from the media about the president’s health, Dr. Conley said the federal law Health Insurance Portability and Accountability Act (HIPAA) prohibited him from divulging the information.
“There are HIPAA rules and regulations that restrict me in sharing certain things for his safety and his own health and reasons,” Conley said during Monday’s press conference in response to a question about what CT scan of Trump’s lungs revealed.
Conley, who previously said that the president was on oxygen and taking a steroid, also refused to say when Trump last tested negative for the disease. The White House doctor’s willingness to divulge some information about the president’s health while invoking HIPAA to decline commenting on others left some people confused as to what exactly HIPAA is and how it works.
Congress passed the Health Insurance Portability and Accountability Act, better known as HIPAA, in 1996, in part to develop a health information database intended to standardize health care transactions and increase efficiency. While Congress passed HIPAA, the law did not actually include a detailed privacy requirement. Instead the law required the secretary of Health and Human Services (HHS) to compile a list of detailed recommendations for how to best protect individuals’ rights regarding personal private health information.
The Privacy Rule secures all of an individual’s protected health information (PHI) created by or provided to any entity or organizations that transmits health information in the course of normal health care practices.
Protected health information is defined as information that “relates to past, present, or future physical or mental health or condition of an individual, the provision of health care to an individual, or the past, present, or future payment for the provision of health care for the individual that either identifies the individual or with respect to which there is a reasonable basis to believe the information can be used to identify the individual.”
Under 45 CFR §164.508, a covered entity “may not use or disclose” an individual’s PHI without valid authorization to do so.
What this means is that the patient is essentially in control of what PHI their doctor can release publicly–even if that patient is the president of the United States. Thus, the information Conley has conveyed regarding the president’s condition is information Trump specifically authorized to be publicly released. Though we do not know exactly why, the remainder of the information–such as the results of the president’s CT scan–were not authorized by Trump for public release.
“The long and short of it is that, a patient can waive HIPAA protections to allow their provider to speak openly to the media about their medical care,” New York Times healthcare reporter Sarah Kliff explained. “If Trump wanted more on his condition shared, HIPAA doesn’t preclude that.”
[image via BRENDAN SMIALOWSKI/AFP via Getty Images]
Have a tip we should know? [email protected]