MedicaidAdministrativeMedium impact
23-1258 Reminder: Protect Patient Privacy When Sharing Medical Records
Health Net·CA·Prior Authorization
We identified it
Jun 20, 2026
Summary
Health Net reminds providers of existing HIPAA requirements for protecting patient privacy, with specific emphasis on confidential handling of sensitive services (mental health, reproductive care, substance abuse, etc.) and requirements for responding to confidential communication requests within 7-14 days.
Action Required
Immediately: Ensure written HIPAA privacy policy is in place and accessible. Train staff on handling sensitive services communications - respond to confidential communication requests within 7 days for electronic/phone requests or 14 days for mail requests. Direct all communications about sensitive services to member's designated contact information, not primary subscriber. Billing team must verify confidential communication preferences before sending bills or EOBs for mental health, reproductive health, substance abuse, and other sensitive services.