We had already received a bill for the same service, which was a fraction of the amount billed on the new invoice, so we were sure there must have been some mistake. Because my husband’s work schedule had been unusually hectic, I called the medical provider to sort the whole thing out.
When I called the billing department, an automated greeting informed me that because of privacy regulations, the billing department could not share information about a patient with anyone but the patient or an authorized representative.
The privacy regulations the automated greeting referenced, the Health Insurance Portability and Accountability Act (HIPAA), regulates the use and disclosure of protected health information concerning a patient.
Any health care provider or insurance company that uses computers in their normal course of business is subject to the law. Entities that violate HIPAA rules are subject to civil fines, as well as criminal penalties with possible jail time, which makes them extremely cautious about sharing medical information with anyone but the patient, even close family members such as spouses and children.
This means that even though my husband and I have been married for almost 19 years, I wouldn’t have had the authority to sort out even a billing mistake without his express permission.
If you want your spouse to be able to talk to doctor’s offices or insurance companies on your behalf, you need to sign a HIPAA authorization. A HIPAA authorization allows you to name an individual who can have access to your medical information so that your health care provider or insurance company have no reservations about sharing your protected medical information with them.