New grad and HIPAA question

As with every floor, patients family members or friends call to find out how their family member is doing. Of course I know HIPAA laws prevent me from divulging specific information without consent but how do you respond when a family member calls and asks generally how their family member is doing? I work on a floor with a large dementia population so it's not like I can just transfer the call to the patients room to have them give the update. How have some of you dealt with this situation? Or what would your advice be to answering this question without breaking HIPAA laws?
Does your facility use signed consents for 2 way communication? The easiest way I found to deal with it is ask if there is a consent on file and then check to verify. P.S. Love that you actually spelled HIPAA correctly.

I'm not sure I'll have to look into that! I know patients and families can set up HIPAA passwords that the nurse can ask for when someone calls. I just feel awkward when I answer the phone caught off guard by a family member (we use facility provided "cellphones" during our shifts meant for in hospital use only but sometimes the numbers get passed on to family members) and they ask "how's my mom doing today?" I don't want to come off rude but is it a violation by simply stating they had a good day, ate their whole lunch yada yada? General statements that aren't necessarily giving out any diagnostic or result specific information?

Cheerfully acknowledge that the pt is there and being well cared for. Let them know that Federal laws prevent you giving out details regarding their condition, but that the pt is 'doing well'. If the pt isn't doing well, suggest that they come visit, or contact whomever is a frequent visitor for more information. If the pt is alert, transfer the call to the pt. Make sure you are sympathetic and concerned, without violating HIPAA. Be kind and understanding. Try not to let them rattle on too much regarding their own problems, but if you can glean more information regarding the pt, it might be useful and interesting.

Great! Thank you for your response!

You're by no means prohibited from giving information to family as a flat rule, you do need the patient's permission or permission of the patient's decision maker which usually isn't that hard to do. HIPAA doesn't say you can't give out information, it just tells you what you need to do before giving out information.

Thank you for spelling HIPAA correctly throughout this whole thread, everyone!

We have a password system, In order for us to give out information, pt (or POA for AMS) has to have a password. We also ask that one family member be the "go-to" person. I hate when 5 siblings call about mama. We also have phones in the room, so that resolves a lot of issues.

Quote from MunoRNYou're by no means prohibited from giving information to family as a flat rule, you do need the patient's permission or permission of the patient's decision maker which usually isn't that hard to do. HIPAA doesn't say you can't give out information, it just tells you what you need to do before giving out information.

Quote from Jules AI guess this depends on where you are working. In psychiatry if the caller asks we don't even disclose whether someone is on the unit without consent.

I know psych is a different category in terms of HIPAA, but I've read that on a "regular" unit (for lack of a better term) it isn't a violation to acknowledge that someone is a patient on the floor. Giving more information than that I can understand being a violation. Not sure if that's true or not now but just what I've heard. Thankfully I've never had someone call asking if so and so was a patient so I haven't had to deal with this issue.

Even acknowledging that the patient is there is a violation of HIPAA, regular floor or psych. You never know who is calling, just because he or she says who he/she is. All you can say is you can't give information to anyone about a patient (and they should know the system to get information, if they are allowed to get it).As far as I know, the difference between HIPAA on psych vs. other floors is that the penalties for violating it are bigger on psych.

Patient consent often includes permission to list in hospital directory and acknowledge presence, condition, unit and/or room number. How many facilities get away is most don't read consents, but many are clear about opt in or out of patient directory. The fines are great for release of information regardless if med-surg or psych. I know because we opted my father's name out of the directory and enacted limited visitors ID required. Drove certain family members nuts but kept certain nosy others at bay. The form I signed on his behalf disclosed the applicable HIPAA rules. I think at one point having opt out only was acceptable but not any more. I know psych, substance abuse and other more sensitive areas you must sign to opt in or out, if not opt out is presumed.