Addressing the opioid crisis while staying HIPAA compliant is a delicate balance, but it’s one that healthcare providers must master if we’re ever going to turn the tide on this devastating epidemic.
According to the HHS drug overdose death rates, “Nearly 108,000 persons in the U.S. died from drug-involved overdose in 2022, including from illicit or prescription drugs.” So, addressing the crisis demands more than just medication management. The crisis is fueled by a combination of prescription and non-prescription opioid misuse, and providers improve their prevention, treatment, and recovery strategies.
One promising step is the Consolidated Appropriations Act of 2023. It mandates that all DEA-registered practitioners (except veterinarians) undergo eight hours of training on treating and managing patients with opioid use disorders (OUD). The Act helps equip providers to manage OUD, reducing opioid-related harm and improving patient outcomes.
Moreover, OUD is a medical condition rather than a moral failing. Providers must help fight the stigma associated with addiction to shift societal perceptions. That’s why the language we use matters. Providers should stick to person-first language, like "person with a substance use disorder," instead of using terms like "addict" or "abuser" which would perpetuate stigma, a narrative review on addressing bias and stigma in the language we use in OUD explains.
Providers can, for example, participate in community initiatives to raise awareness and promote compassion towards individuals struggling with addiction.
However, creating a supportive environment also involves adhering to privacy regulations. The HHS clarifies that while patients with decision-making capacity have control over their health information, HIPAA allows disclosures without explicit consent to inform family or address potential health threats.
More specifically, HIPAA compliant emails allow providers to communicate with patients about their treatment plans, without compromising their privacy or security. Additionally, providers can securely email patients' family members, giving them updates and educational resources to help support the patient’s recovery.
Even in emergencies, providers can use HIPAA compliant emails to send information about recognizing overdose symptoms, administering emergency medicine like Narcan (naloxone), and where to get it. It helps caregivers act quickly, creating a supportive environment for the patient and their loved ones involved in the treatment.
HIPAA compliance is also about advocacy, and since the opioid crisis isn't going away overnight, providers can use HIPAA compliant emails to send advocacy resources, and legislative updates to help patients fight for their rights. It allows us to prevent overdoses and restore dignity to those who need it most.
Go deeper: Using email and text messaging in health advocacy
FAQs
What is HIPAA?
The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that establishes national standards for safeguarding protected health information (PHI). HIPAA mandates that healthcare providers, insurers, and business associates safeguard patients’ PHI during transit and at rest.
What makes an email HIPAA compliant?
An email is HIPAA compliant when it meets the HIPAA requirements for protecting sensitive patient information. HIPAA compliant platforms, like Paubox, use encryption and access controls, maintain audit trails, and secure stored emails, preventing unauthorized access or breaches.
Additionally, Paubox signs a business associate agreement (BAA) with the healthcare entity to ensure HIPAA compliance.
Can family members be informed about a patient’s treatment via HIPAA compliant email?
Yes, if the patient consents, providers can use HIPAA compliant emails to share relevant information with designated family members.
