HIPAA Violation PHI sent to CC

[jjoshua]

What is the name of your state? NJ

Responding to a credit card payment dispute, my medical insurance carrier provided PHI to their third party credit card processor without my consent. A business associate agreement was not in effect.

Did my medical insurance carrier violate HIPAA guidelines?

 

[averad]

So what did they release?

 

[jjoshua]

So what did they release?

Prescription information including drug names and NDC codes.