Providing Patient Data to Poison Centers is HIPAA-Compliant

Poison centers were established as health care providers authorized to share protected patient information with health care providers providing direct patient care in HIPAA regulations in 45CFR parts 160 and 164 as published in the Federal Register on Dec 28, 2000. In addition, the CDC has provided the American Association of Poison Control Centers (AAPCC) with a grant of authority to conduct surveillance activity and function as a public health authority to which covered entities may disclose protected health information.

In addition, the Florida Poison Information Centers are a State of Florida, Department of Health program performing public health functions.  As such we are exempt from HIPAA privacy regulations.

Use the following links for documentation in Adobe .pdf format:

Letter from State of Florida Department of Health (July 2004) outlining new State statues allowing health facilities to discuss cases with poison centers

CFR45, Federal Register, Dec 28, 2000

Letter on CDC authority to function as public health entity, Executive Director, American Association of Poison Control Centers (AAPCC)

Letter from CDC granting authority to AAPCC to conduct surveillance and function as a public health entity

Letter from State of Florida Department of Health confirming that Poison Centers in Florida are performing public health functions under state law and are exempt from HIPAA privacy regulations.  Health care providers may share information with the poison centers without written consent.

HIPAA Privacy: Working with Florida's Poison Control Centers.  Florida Hospital Association