Hello, my name is Sean Regan,EMS Captain with the Lynchburg Fire
Department and by appointment our department's HIPAA officer.

I have two questions that I believe someone on this board can answer.

1. Our department is implementing a FF Rehab program and our
department is attempting to establish a baseline and upper limit for
FF BPs. Our health and safety officer is soliciting Employee Name,
BP reading and any BP medication that is being taken by the employee
to be posted on spreadsheet that is stored on an unprotected network
drive that can be accessed by any employee within our department.
It appears that our H&S officer was told that this information was
not PHI and that if only our employees had access to the information
that it met the standards set forth by HIPAA. What are your
thoughts on this?

2. How do departments handle the release of PHI to family members
(especially when the patient is deceased). Any policies, processes
and forms would be appreciated. I saw the flowsheet that Jim posted
and have started to use that. Thanks Jim!

Sean Regan,EMS Captain
sean.regan@...