Information in medical records is considered highly private and sensitive. But are there ever instances where a doctor may share patient information without their permission? It depends, but generally only under extraordinary circumstances.

Medical ethics rules, state laws, and the federal law known as the Health Insurance Portability and Accountability Act (HIPAA), generally require doctors and their staff to keep patients' medical records confidential unless the patient allows the doctor's office to disclose them. However, there are a variety of circumstances under which a doctor may share the information in medical records and personal medical information without permission from the patient. The following are some examples.

The Doctor and/or Patient Needs Help

If the patient has suffered some traumatic injury and cannot make medical decisions for themselves, the doctor may discuss the patient's medical information with their next of kin. The family member will often need this information so they can make an informed decision about the next steps in medical treatment. If the patient has a living will or a healthcare power of attorney, the doctor may only discuss the patient's condition with the people named in those documents.

Even in cases not involving traumatic injuries, HIPAA allows doctors to share patient information and records with other health care providers as necessary for their health and treatment. They may also discuss a patient's condition with family, relatives, and friends that the patient identifies as being involved in their healthcare (unless the patient objects). However, health care providers generally can't share personal medical information and records with providers who aren't involved in the patient's care, unless all personal identifiable information is removed.

The Government Requires Patient Information

The government and legal system usually respect patients' privacy and don't require doctors to disclose personal medical information. However, there are a few basic data points doctors must report. Doctors must file birth and death certificates. They must also report certain diseases they've treated over a certain time period so that the government can monitor the nation's health, although these disclosures don't usually include the patients' names. Doctors can also use your health information if necessary to protect public health, such as reporting a flu outbreak.

Doctors must also report suspected cases of child abuse, even when the child or parent don't expressly authorize the disclosure. Similarly, if a doctor thinks their patient's mental state will cause them to be a danger to themselves or others, they may report this in order to prevent harm to others.

The Patient Makes Their Health an Issue in Court

If the patient brings a personal injury or workers' compensation claim, in which his health is a major issue in the case, the doctor may come to court and testify about the patient's injuries. However, if the patient's health is not necessary to the case's resolution, the doctor usually cannot be forced to testify.

Talk to an Attorney About Your Patient Information

Medical privacy laws are varied and complex, particularly since they are addressed by both state and federal laws. If you're concerned that your doctor shared patient information without your permission, in an improper manner, you should consider speaking with an experienced health care attorney today.