HIPAA Handbooks

  • Privacy and security training for new and seasoned staff
  • 11 staff/setting focus areas
  • Education on protecting PHI
  • New HITECH Act changes
  • Discounts on bulk purchases



  • Role-based training using real-life case scenarios
  • Test-your-knowledge exercises with remediation
  • Post-course test to document staff participation


Other HIPAA Resources

  • Hot-topic audio conferences
  • Books on privacy and security
  • Newsletters
  • e-Newsletter
  • Videos



HIPAA Q&A: Family members obtaining records for a deceased patient

Email This Post Print This Post

Submit your HIPAA questions to Editoquestionr John Castelluccio at jcastelluccio@hcpro.com and we will work with our experts to provide the information you need.

Q: Can family members of a deceased patient obtain the medical records of the deceased if it is relevant to their own plan of care and family history?

A: Yes. The HIPAA Privacy Rule allows covered entities (CE) to disclose a deceased person’s PHI to family members and others involved in the person’s care or payment for care prior to his death, unless doing so is inconsistent with any prior expressed preference of the deceased person that was known to the CE. Information released to these individuals should be limited to the minimum necessary. If a complete copy of the patient’s record is requested, obtain written authorization from the executor of the deceased person’s estate or his next of kin, as prescribed by state law.

Editor’s note: Mary Brandt, MBA, RHIA, CHE, CHPS, answered this question for HCPro’s Briefings on HIPAA. This information does not constitute legal advice. Consult legal counsel for answers to specific privacy and security questions.

Categories : HIPAA Q&A

Leave a Reply