The American Society of Health-System Pharmacists (ASHP) believes that all medical information is sensitive and should be given the utmost protection. ASHP supports the adoption into federal law of a minimum standard for protection of individually identifiable patient health information and believes that states should retain the ability to adopt standards that are more stringent than federal law.
ASHP believes that patients should have the right to access and review their medical records and the ability to correct factual errors in those records. Patients should also have the right to know who has access to their medical records and to authorize how their medical information will be used.
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) requires health systems to have written policies and procedures in place to guard against the unauthorized collection, use, or disclosure of individually identifiable patient health information and provide notice of such policies to their patients. All health-system personnel should be trained to understand and comply with those privacy standards.