<p>I recently visited my school's NP-PA for a nasty cold that wouldn't go away.
They ended up asking my a couple personal questions about lifestyle, orientation and smoking habits, which I truthfully answered. I now regret it because I just read that information collected by schools, including "records of visits to the school nurse" are not protected by HIPAA, and I also now remember signing a form during orientation week 3 years ago allowing my parents to access my health records. In addition, it seems that under the Gramm-Leach-Bliley Act, my medical records are being shared with banking, security, insurance companies and potentially various third-parties. Like most college students, I am covered by both my parents' and my school insurance policies. I would also assume that various school officials, have access to my, as I have learned, non-private medical records. </p>
<p>I would never ever have disclosed the information that I did if I knew this beforehand. I thought I was having a private conversation with a PA. What can I do now to protect my privacy? Is there any action(s) that I can take to prevent my records from being shared with so many people including my parents?</p>
<p>I would visit the school’s health office and indicate that you would like that personal information removed from your medical records and that you do NOT give them permission to share that information with anyone, including insurers. I would also ask that you be allowed to amend any HIPPA waiver or permission you granted to say that you revoke it as to the information you disclosed in confidence and want stricken.</p>
<p>If you signed a waiver to allow your parents access your medical records, that’s easy enough to revoke. Just remember that the Health Service isn’t going to send these to your parents automatically. Your parents will need to request them, and if they have no reason to do so, I don’t know that this is a huge worry.</p>
<p>It’s highly unlikely that the Health Service is sharing your medical records with “banking, security, insurance companies and potentially various third-parties” without your consent. If this is bothering you, go back to the NP and ask about their confidentiality policy.</p>
<p>Thank you. I read further and realized that orientation isn’t actually included in health records so I guess I got really worried for no reason.</p>