[House Hearing, 113 Congress]
[From the U.S. Government Publishing Office]



 
       DOES HIPAA HELP OR HINDER PATIENT CARE AND PUBLIC SAFETY?

=======================================================================

                                HEARING

                               BEFORE THE

              SUBCOMMITTEE ON OVERSIGHT AND INVESTIGATIONS

                                 OF THE

                    COMMITTEE ON ENERGY AND COMMERCE
                        HOUSE OF REPRESENTATIVES

                    ONE HUNDRED THIRTEENTH CONGRESS

                             FIRST SESSION

                               __________

                             APRIL 26, 2013

                               __________

                           Serial No. 113-37


      Printed for the use of the Committee on Energy and Commerce

                        energycommerce.house.gov



                  U.S. GOVERNMENT PRINTING OFFICE
82-190                    WASHINGTON : 2013
-----------------------------------------------------------------------
For sale by the Superintendent of Documents, U.S. Government Printing Office, 
http://bookstore.gpo.gov. For more information, contact the GPO Customer Contact Center, U.S. Government Printing Office. Phone 202�09512�091800, or 866�09512�091800 (toll-free). E-mail, [email protected].  

                    COMMITTEE ON ENERGY AND COMMERCE

                          FRED UPTON, Michigan
                                 Chairman
RALPH M. HALL, Texas                 HENRY A. WAXMAN, California
JOE BARTON, Texas                      Ranking Member
  Chairman Emeritus                  JOHN D. DINGELL, Michigan
ED WHITFIELD, Kentucky                 Chairman Emeritus
JOHN SHIMKUS, Illinois               EDWARD J. MARKEY, Massachusetts
JOSEPH R. PITTS, Pennsylvania        FRANK PALLONE, Jr., New Jersey
GREG WALDEN, Oregon                  BOBBY L. RUSH, Illinois
LEE TERRY, Nebraska                  ANNA G. ESHOO, California
MIKE ROGERS, Michigan                ELIOT L. ENGEL, New York
TIM MURPHY, Pennsylvania             GENE GREEN, Texas
MICHAEL C. BURGESS, Texas            DIANA DeGETTE, Colorado
MARSHA BLACKBURN, Tennessee          LOIS CAPPS, California
  Vice Chairman                      MICHAEL F. DOYLE, Pennsylvania
PHIL GINGREY, Georgia                JANICE D. SCHAKOWSKY, Illinois
STEVE SCALISE, Louisiana             JIM MATHESON, Utah
ROBERT E. LATTA, Ohio                G.K. BUTTERFIELD, North Carolina
CATHY McMORRIS RODGERS, Washington   JOHN BARROW, Georgia
GREGG HARPER, Mississippi            DORIS O. MATSUI, California
LEONARD LANCE, New Jersey            DONNA M. CHRISTENSEN, Virgin 
BILL CASSIDY, Louisiana                  Islands
BRETT GUTHRIE, Kentucky              KATHY CASTOR, Florida
PETE OLSON, Texas                    JOHN P. SARBANES, Maryland
DAVID B. McKINLEY, West Virginia     JERRY McNERNEY, California
CORY GARDNER, Colorado               BRUCE L. BRALEY, Iowa
MIKE POMPEO, Kansas                  PETER WELCH, Vermont
ADAM KINZINGER, Illinois             BEN RAY LUJAN, New Mexico
H. MORGAN GRIFFITH, Virginia         PAUL TONKO, New York
GUS M. BILIRAKIS, Florida
BILL JOHNSON, Missouri
BILLY LONG, Missouri
RENEE L. ELLMERS, North Carolina
              Subcommittee on Oversight and Investigations

                        TIM MURPHY, Pennsylvania
                                 Chairman
MICHAEL C. BURGESS, Texas            DIANA DeGETTE, Colorado
  Vice Chairman                        Ranking Member
MARSHA BLACKBURN, Tennessee          BRUCE L. BRALEY, Iowa
PHIL GINGREY, Georgia                BEN RAY LUJAN, New Mexico
STEVE SCALISE, Louisiana             EDWARD J. MARKEY, Massachusetts
GREGG HARPER, Mississippi            JANICE D. SCHAKOWSKY, Illinois
PETE OLSON, Texas                    G.K. BUTTERFIELD, North Carolina
CORY GARDNER, Colorado               KATHY CASTOR, Florida
H. MORGAN GRIFFITH, Virginia         PETER WELCH, Vermont
BILL JOHNSON, Ohio                   PAUL TONKO, New York
BILLY LONG, Missouri                 GENE GREEN, Texas
RENEE L. ELLMERS, North Carolina     JOHN D. DINGELL, Michigan
JOE BARTON, Texas                    HENRY A. WAXMAN, California (ex 
FRED UPTON, Michigan (ex officio)        officio)
  


                             C O N T E N T S

                              ----------                              
                                                                   Page
Hon. Tim Murphy, a Representative in Congress from the 
  Commonwealth of Pennsylvania, opening statement................     1
    Prepared statement...........................................   115
Hon. Steve Scalise, a Representative in Congress from the State 
  of Louisiana, prepared statement...............................   117

                               Witnesses

Leon Rodriguez, Director, Office for Civil Rights, Department of 
  Health and Human Services......................................     3
    Prepared statement...........................................     5
    Answers to submitted questions...............................   118
Mark A. Rothstein, Herbert F. Boehl Chair of Law and Medicine, 
  Director, Institute for Bioethics, Health Policy, and Law, 
  University of Louisville School of Medicine....................    13
    Prepared statement...........................................    15
    Answers to submitted questions...............................   131
Richard Martini, M.D., Professor of Pediatrics and Psychiatry, 
  University of Utah School of Medicine, Chair, Department of 
  Psychiatry and Behavioral Health, Primary Children's Medical 
  Center.........................................................    37
    Prepared statement...........................................    39
    Answers to submitted questions...............................   140
Carol Levine, Director, Families and Health Care Project, United 
  Hospital Fund..................................................    43
    Prepared statement...........................................    45
Gregg Wolfe, Father of a son with mental illness and substance 
  abuse..........................................................    58
    Prepared statement...........................................    62
Edward Kelley, Father of a son with mental illness...............    70
    Prepared statement...........................................    73
Jan Thomas, Family impacted by HIPAA.............................    84
    Prepared statement...........................................    86
Deven McGraw, Director of the Health Privacy Project, Center for 
  Democracy and Technology.......................................    88
    Prepared statement...........................................    90
    Answers to submitted questions...............................   143


       DOES HIPAA HELP OR HINDER PATIENT CARE AND PUBLIC SAFETY?

                              ----------                              


                         FRIDAY, APRIL 26, 2013

                  House of Representatives,
      Subcommittee on Oversight and Investigations,
                          Committee on Energy and Commerce,
                                                    Washington, DC.
    The subcommittee met, pursuant to call, at 9:02 a.m., in 
room 2123 of the Rayburn House Office Building, Hon. Tim Murphy 
(chairman of the subcommittee) presiding.
    Members present: Representatives Murphy, Gingrey, Scalise, 
Harper, Olson, Gardner, Griffith, Johnson, Long, Ellmers, 
Cassidy, DeGette, Braley, Schakowsky, Butterfield, Tonko, and 
Green.
    Staff present: Carl Anderson, Counsel, Oversight; Mike 
Bloomquist, General Counsel; Sean Bonyun, Communications 
Director; Matt Bravo, Professional Staff Member; Karen 
Christian, Chief Counsel, Oversight; Andy Duberstein, Deputy 
Press Secretary; Brad Grantz, Policy Coordinator, Oversight and 
Investigation; Debbee Hancock, Press Secretary; Brittany 
Havens, Legislative Clerk; Robert Horne, Professional Staff 
Member, Health; Peter Kielty, Deputy General Counsel; Andrew 
Powaleny, Deputy Press Secretary; Alan Slobodin, Deputy Chief 
Counsel, Oversight; Sam Spector, Counsel, Oversight; Tom 
Wilbur, Digital Media Advisor; Jean Woodrow, Director, 
Information Technology; Phil Barnett, Democratic Staff 
Director; Stacia Cardille, Democratic Deputy Chief Counsel; 
Brian Cohen, Democratic Staff Director, Oversight and 
Investigations, Senior Policy Advisor; Elizabeth Letter, 
Democratic Assistant Press Secretary; Stephen Salsbury, 
Democratic Special Assistant; Roger Sherman, Democratic Chief 
Counsel; and Matt Siegler, Democratic Counsel.

   OPENING STATEMENT OF HON. TIM MURPHY, A REPRESENTATIVE IN 
         CONGRESS FROM THE COMMONWEALTH OF PENNSYLVANIA

    Mr. Murphy. Good morning. We are here today, the Oversight 
and Investigation Subcommittee of the Committee on Energy and 
Commerce, for a hearing entitled, ``Does HIPAA Help or Hinder 
Patient Care and Public Safety?''
    As there is a classified briefing as well as votes this 
morning, we are going to waive opening statements in order to 
get right to the witness testimony. We will allow members to 
submit their opening statements for the record.
    A hearing last month addressed issues raised after the 
Newtown tragedy. Some of the witnesses told the subcommittee 
how HIPAA had hindered their ability to care and treat for 
loved ones. We are going to hear from a number of folks, 
government representatives, professionals, parents, experts, 
family members. It is an important issue.
    Members, the reason we are here is members of Congress 
themselves are experts and knowledgeable on many of these 
issues, so we appreciate your attention to this. We are here to 
ask questions and learn the facts about HIPAA from those who 
are knowledgeable of them and remind everyone that we need to 
maintain decorum in the committee room. Disruptions will not be 
tolerated and people doing so will be discharged if needed.
    We also are asking members to stick closely to the time 
limit as we go through.
    Ms. DeGette. Will the Chairman yield just briefly?
    Mr. Murphy. Yes. I yield briefly.
    Ms. DeGette. The Chairman and I have agreed to put all of 
the opening statements in the record, and I think that is 
appropriate given this classified briefing which was just 
scheduled yesterday out of respect to the witnesses, many whom 
have come from around the country. The Chairman and I decided 
we really wanted to hear from the witnesses.
    I will say, Mr. Chairman, though, that this is really an 
important topic, the HIPAA issues, particularly as they relate 
to gun violence, but it is also important if we are being asked 
to get the U.S. militarily or otherwise involved in Syria and 
this classified briefing is with the Secretary of State, so on 
behalf of everybody I want to apologize to the witnesses. Some 
of us may be coming in and out, but we will read the testimony, 
and we will make sure we know what is going on.
    So thank you very much, Mr. Chairman.
    Mr. Murphy. I appreciate it. I want to also let members 
know I communicated with Majority Leader Eric Cantor last 
evening, and he is having his staff working on providing a 
special briefing for any members who remain through this 
committee.
    You are aware that the committee is holding an 
investigative hearing. I say this to the witnesses, Mr. 
Rodriguez and Mr. Rothstein, and when doing so, we have the 
practice of taking testimony under oath. Do you have any 
objections to testifying under oath?
    Thank you.
    The Chair then advises you that under the rules of the 
House and the rules of the committee you are entitled to be 
advised by counsel. Do you desire to be advised by counsel 
during your testimony today?
    Thank you.
    In that case will you please rise and raise your right 
hand? I will swear you in.
    [Witnesses sworn.]
    Mr. Murphy. Let the record show the witnesses have answered 
in the affirmative. You are now under oath and subject to the 
penalties set forth in Title XVIII, Section 1001 of the United 
States Code. You may each now give a 5-minute opening 
statement, but let me introduce the witnesses for today's 
hearing.
    On the first panel we have Mr. Leon Rodriguez. Mr. 
Rodriquez is the Director of the Office for Civil Rights at the 
Department of Health and Human Services. He oversees the 
administrative operations of the civil rights division.
    We also have Professor Mark Rothstein. He has a joint 
appointment at the University of Louisville, School of Law, and 
the School of Medicine. He also holds a Herbert F. Boehl Chair 
of Law and Medicine and is the founding director of the 
Institute for Bioethics, Health Policy, and Law at the 
University of Louisville School of Medicine.
    Gentlemen, you may begin. Make sure your microphone is on 
and pulled close to your mouth. Thank you. You may begin.

TESTIMONY OF LEON RODRIGUEZ, DIRECTOR, OFFICE FOR CIVIL RIGHTS, 
DEPARTMENT OF HEALTH AND HUMAN SERVICES; AND PROFESSOR MARK A. 
    ROTHSTEIN, HERBERT F. BOEHL CHAIR OF LAW AND MEDICINE, 
  DIRECTOR, INSTITUTE FOR BIOETHICS, HEALTH POLICY, AND LAW, 
          UNIVERSITY OF LOUISVILLE SCHOOL OF MEDICINE

                  TESTIMONY OF LEON RODRIGUEZ

    Mr. Rodriguez. Good morning, Mr. Chairman, Ranking Member 
DeGette, and members of the subcommittee. It is an honor for me 
to be here today in my capacity as Director of the Office for 
Civil Rights at the U.S. Department of Health and Human 
Services, and I thank you for calling a hearing on this very 
important topic.
    As HHS's enforcement agency for civil rights and health 
privacy rights, OCR handles enforcement, policy development, 
and education for compliance with laws in those areas. Our 
office plays an important role in ensuring that an individual's 
sensitive health information remains private and secure and 
that individuals are able to exercise important rights with 
respect to their health information.
    One of the underpinnings of HIPAA is that optimal 
healthcare depends for many patients on their trust that their 
health information remains confidential. HIPAA also ensures 
that health information can flow for important and necessary 
purposes such as patient treatment, obtaining payment for 
health services and protecting the country's public health and 
safety. I have often said that HIPAA is meant to be a valve and 
not a blockage, and that it is above all meant to maximize the 
welfare and interests of thepatients.
    As such, I look forward to discussing the existing 
flexibilities within HIPAA. HIPAA recognizes the vital role 
that family members play in supporting patients with 
significant illness, both physical and mental. I have read the 
family testimonies that were placed in the record and am 
heartbroken by them, and so, therefore, take seriously this 
committee's desire to get to the right answer on these issues.
    To directly address the concerns that underlie this hearing 
I will discuss the paths that HIPAA offers for providers to 
disclose information received during treatment to protect the 
health and safety of their patients.
    For example, HIPAA permits personal health information to 
be used or disclosed without an individual's authorization for 
health treatment and payment and for the business operations of 
covered entities. HIPAA also permits other uses and disclosures 
for certain public health activities, for law enforcement 
purposes, and to avert serious and imminent threats to health 
or safety.
    I would like to talk about disclosures to family members 
and friends of patients. This is an important area. Ordinarily 
if a patient does not object to information being either shared 
in front of family members or friends or with family members or 
friends, HIPAA provides a clear avenue for disclosure in those 
cases.
    Additionally, if a patient is incapacitated--and when I say 
incapacitated, we mean for that word to be given its full 
ordinary meaning--healthcare providers may still communicate 
with family and friends of the patient if the provider 
determines, based on professional judgment, that doing so is in 
the best interest of the individual. And this is, I think, an 
important point to underscore. HIPAA is meant to revolve around 
the professional judgment of the provider as to what is in the 
best interest of the patient. It is not meant to supplant that 
judgment.
    And so, for example, a nurse can discuss a patient's 
medical condition in front of the patient's sister, who 
accompanies her to an appointment. If a patient is unconscious 
or otherwise incapacitated, the doctor, again, can make that 
judgment to share information with family members.
    Similarly, HIPAA recognizes that professional codes, state 
laws, and professional standards of care recognize a duty and 
authority to warn of situations where a patient may pose a 
danger to themselves or others or may have disclosed 
information indicating a threat by another to either themselves 
or a third person.
    In those cases where there is a serious and imminent risk 
of harm to health or safety, HIPAA has a clearly-recognized 
exception for disclosure. And when I say an imminent risk to 
health or safety, it is not simply the scenario of an 
individual going out to commit a violent crime, but, in fact, 
it covers a number of possible scenarios that a healthcare 
provider, particularly a mental healthcare provider, may 
encounter.
    We take our obligations to educate providers and patients 
on these flexibilities seriously, and it is for this reason 
that we in the Administration took the initiative in January 
after the tragic events in Newtown to issue a letter to the 
Nation's healthcare providers clarifying these important 
points.
    Finally, I want to talk for just a moment about the nature 
in which we utilize our enforcement authorities. We focus 
primarily on longstanding broad-based security threats. We have 
never taken enforcement action because a provider has decided 
in the best interests of a patient to disclose information to a 
related party.
    Thank you, Mr. Chairman, thank you, Ranking Member, thank 
you, members of the committee.
    [The prepared statement of Mr. Rodriquez follows:]

    [GRAPHIC] [TIFF OMITTED] T2190.001
    
    [GRAPHIC] [TIFF OMITTED] T2190.002
    
    [GRAPHIC] [TIFF OMITTED] T2190.003
    
    [GRAPHIC] [TIFF OMITTED] T2190.004
    
    [GRAPHIC] [TIFF OMITTED] T2190.005
    
    [GRAPHIC] [TIFF OMITTED] T2190.006
    
    [GRAPHIC] [TIFF OMITTED] T2190.007
    
    [GRAPHIC] [TIFF OMITTED] T2190.008
    
    Mr. Murphy. Thank you, Mr. Rodriguez.
    Mr. Rothstein, you are recognized for 5 minutes.

                 TESTIMONY OF MARK A. ROTHSTEIN

    Mr. Rothstein. Mr. Chairman.
    Mr. Murphy. Pull the microphone close to you, if you would.
    Mr. Rothstein. Mr. Chairman.
    Mr. Murphy. Still not on. Is it on? Pull it real close.
    Mr. Rothstein. OK. How about there?
    Mr. Murphy. There we go.
    Mr. Rothstein. Thank you.
    Mr. Murphy. These are government mikes so during the 
sequester they are down 20 percent.
    Mr. Rothstein. As is my voice, I am afraid.
    Mr. Chairman and members of the subcommittee, my name is 
Mark Rothstein. I am on faculty of the University of 
Louisville, but I am testifying today in my individual 
capacity, and again, let me apologize for my laryngitis. It is 
seasonal I am afraid.
    In my testimony this morning I want to make the following 
three points. First, the HIPAA privacy rule is essential to 
patient care and public health and safety, second, exceptions 
to the privacy rule permit disclosure of health information for 
important public purposes, and third, additional measures could 
enhance the effectiveness of the privacy rule.
    First, ever since the Hippocratic Oath, medical codes of 
ethics have established the duty of physicians to maintain the 
confidentiality of patient health information. Without 
assurances of confidentiality, patients will be reluctant to 
divulge sensitive information about their physical and mental 
health, their behavior, and lifestyle that could be vital to 
the individual's treatment. The privacy rule codifies this 
crucial requirement of confidentiality which is necessary for 
ethical and effective individual healthcare.
    Health privacy laws also are essential to the protection of 
public health and safety. To illustrate, this afternoon I will 
be returning home to Louisville. At lunch, I do want my cook or 
server to be someone who was reluctant to get treatment for 
hepatitis A because of privacy concerns. I do not want as my 
taxi driver someone with chronic tuberculosis who was afraid to 
get ongoing health treatment. I do not want my flight safety 
placed at risk by an air traffic controller with a mental 
health problem or a pilot with substance abuse who was deterred 
from obtaining behavioral health care. Confidentiality 
protections, therefore, serve to advance both the patient's and 
the public's interest.
    Although we were all deeply saddened by the recent horrific 
loss of life caused by some violent, mentally-unstable 
individuals, we should appreciate the potential consequences if 
new, excessive mental health reporting requirements were 
enacted. Each year in the United States there are over 38,000 
suicides and over 700,000 emergency room visits caused by self-
inflicted harms. An estimated 26.2 percent of the people in the 
U.S. have a diagnosed mental disorder in any given year. Any 
steps to lessen confidentiality protections or mandate the 
unnecessary disclosure of mental health information could lead 
vast numbers of individuals to forego mental health treatment 
and potentially result in significantly more suicides, self-
inflicted harms, and untreated mental illness.
    Second, the privacy rule specifically permits a covered 
entity to disclose 12 types of health information of importance 
to the public, and therefore, the privacy rule does not hinder 
public safety. Among these 12 categories are disclosures for 
public health activities, about victims of abuse, neglect, or 
domestic violence, for law enforcement, and to avert a serious 
threat to health or safety.
    The 12 public purpose exceptions are permissive. The 
privacy rule does not require any disclosures. The disclosure 
obligations arise from other sources such as state public 
health reporting laws. The effect of the public purpose 
exceptions is to permit otherwise-required disclosures without 
violating the privacy rule.
    Third, for the last 10 years, inadequate health 
professional and patient outreach and education programs have 
led to a lack of understanding of the privacy rule by many 
affected individuals and covered entities. A common problem is 
that some uses and disclosures permitted by the privacy rule 
are not allowed by some covered entities, perhaps out of 
ignorance or an over-abundance of caution.
    The 2013 promulgation of the omnibus amendments to the 
privacy rule make it an appropriate time for HHS to start a new 
program of public and healthcare provider education and 
outreach.
    In conclusion, the privacy rule, I believe, is essential to 
individual healthcare and public health and safety. Additional 
efforts to increase understanding of the privacy rule by the 
public and covered entities, as well as revising some of the 
public purpose exceptions, will enhance the effectiveness of 
the privacy rule.
    I thank you for the opportunity to testify this morning.
    [The prepared statement of Mr. Rothstein follows:]

    [GRAPHIC] [TIFF OMITTED] T2190.009
    
    [GRAPHIC] [TIFF OMITTED] T2190.010
    
    [GRAPHIC] [TIFF OMITTED] T2190.011
    
    [GRAPHIC] [TIFF OMITTED] T2190.012
    
    [GRAPHIC] [TIFF OMITTED] T2190.013
    
    [GRAPHIC] [TIFF OMITTED] T2190.014
    
    [GRAPHIC] [TIFF OMITTED] T2190.015
    
    Mr. Murphy. I thank both the gentlemen. Let me just ask 
some questions. I recognize myself for 5 minutes.
    During this subcommittee's March 5 forum on severe mental 
illness, Pat Milam, father of a son with a serious mental 
illness, pointed to HIPAA as a significant obstacle to getting 
his son the help he needed. Mr. Milam explained that one of his 
son's doctors judged him to be, ``of extremely high risk for 
suicide or other bad outcome,'' more than once and yet failed 
to share this information with Pat or his wife. Matthew Milam 
tragically took his own life only months later while living 
with his parents, and it was only after Matthew's death that 
the Milams were able to obtain their son's medical records.
    Is this an example where HIPAA worked as intended, Mr. 
Rothstein?
    Mr. Rothstein. No, but if HIPAA were followed to the 
letter, that would have permitted the disclosure under----
    Mr. Murphy. Mr. Rodriguez, you agree with that, too? Does 
HIPAA bar a physician or a licensed provider from revealing 
health information to the parents of a young adult who is 
living with their parents? Yes or no, Mr. Rodriguez?
    Mr. Rothstein. No.
    Mr. Rodriguez. Under some circumstances it might. In most 
circumstances there would be paths for disclosures to those 
parents.
    Mr. Murphy. Paths for disclosure. Does it allow physicians 
to provide information to parents if the young adult is 
receiving care through the parent's healthcare plan up to age 
26 as envisioned by the Affordable Care Act? So if they are 
still dependents, or is it an age? Can you tell me where that 
cutoff is?
    Mr. Rodriguez. Yes. The cutoff in terms of the patient's 
ordinary ability to object to the provider's disclosure is the 
age of majority, whatever it happens to be in a particular 
State.
    Mr. Murphy. So in Pennsylvania it is age 14. A 14-year-old 
could decide whether or not that information is to be 
disclosed. In other States it may be 18.
    Mr. Rodriguez. Yes. I would assume ordinarily it would be 
18.
    Mr. Murphy. Are either of you familiar with the term, 
anosognosia, what that term means?
    Mr. Rodriguez. I am aware of it, Chairman, because I 
actually read the majority memorandum for this hearing. 
Certainly going back to the discussion of serious incapacity 
and the discussion of serious and imminent risk of harm, 
certainly situations where that condition either renders the 
patient to be in a condition of incapacity or where the 
consequences of that condition being unaddressed are a serious 
risk of imminent harm to health or safety--again, it doesn't 
mean going out and committing a gun crime. It can mean a 
variety of different things that could be extremely harmful to 
that patient.
    Then, yes, in those cases a provider could disclose without 
consent.
    Mr. Murphy. Mr. Rothstein, would you agree?
    Mr. Rothstein. I agree. Yes.
    Mr. Murphy. It sounds like from what I read from your 
testimony and what you have said here that we may find that a 
lot of providers are misinterpreting or over-interpreting the 
laws on HIPAA which prevent them from disclosing things to 
patients. Is that what you are suggesting is happening here?
    Mr. Rodriguez. Chairman, we have observed in a variety of 
our areas of enforcement that there is anxiety about our rules 
in all the wrong places. If you look at where we have taken 
enforcement action, it has been focused on institutions that 
have had longstanding failures to protect the security of all 
of their patients' information.
    HIPAA was designed to respect the provider's judgment as to 
their patients' best interests. I think that is often, 
unfortunately, misunderstood, and that is one of the reasons we 
provided that clarification.
    Mr. Murphy. Let me ask this because it gets to the crux of 
the matter of why we are here today, and we are going to hear 
some testimony from some professionals, some experts, and some 
parents.
    What if the provider decides not to share the memo or the 
information, whatever, for those reasons? What if the patient 
doesn't sign a release? A patient themselves does not even 
recognize they have a problem, and the parents even go to court 
and say, we would like to have these records reviewed. In some 
cases the hospital staff says, I can't release these records if 
a judge says we can, and the judge asks the patient, the 
patient says, no, and yet a condition may still exist that the 
patient is at risk for suicide or harm to themselves for not 
following their treatment.
    What then?
    Mr. Rodriguez. One thing to also keep in mind in answering 
this question is HIPAA's not the only relevant body of law. So 
we are also talking about professional ethical standards, both 
the American Psychiatric Association and the American 
Psychological Association impose clear duties of 
confidentiality and create exceptions as we do, and, in fact, 
our rules are built around both those ethical duties and State 
law duties such as, for example, that in the Tarasoff v. 
California Board of Regents case. Clearly in the kinds of 
scenarios where you describe where a provider is aware of, for 
example, the risk of suicide, a very clear situation where we 
are talking about serious risk of imminent harm, HIPAA does not 
stand as a barrier, even in the absence of the patient's 
consent to disclosure.
    Mr. Murphy. I am going to cut myself----
    Mr. Rodriguez. Anybody who can help the patient. That is a 
critical element here. To that person who can lessen or remove 
the threat to the patient. If that is the parents, then that is 
where the disclosure can go.
    Mr. Murphy. Thank you. I am out of time. I am going to go 
now to Ms. DeGette for 5 minutes.
    Ms. DeGette. Thank you, Mr. Chairman.
    I think we can all agree that HIPAA provides many important 
protections for people's medical privacy, and we have a history 
of bipartisan agreement that people need to be able to keep 
their sensitive health information private, and so I think we 
would agree with our witnesses on the importance of HIPAA but 
also we need to recognize that in many of these mass shootings 
that we have seen and in many mental illness situations where 
someone is a risk to themselves and to their families, there 
are clearly some problems with how providers and institutions 
are interpreting HIPAA obligations. Because it seems to me if 
someone is a danger to themselves or to others, that would be 
up to the provider's decision to advise the parents or other 
responsible adults.
    Is that correct, Mr. Rodriguez?
    Mr. Rodriguez. Yes. It would----
    Ms. DeGette. And Mr. Rothstein, is that correct?
    Mr. Rothstein. Yes. I agree with that.
    Ms. DeGette. So I just want to say I am not going to 
blindly defend HIPAA, but I think we should be very, very 
careful when we contemplate changes to that statute. We heard 
in March about providers' interpretations of HIPAA and how they 
can be barriers to treating not just the mentally but also the 
physically ill.
    I myself, as a parent, I have a diabetic child, and even 
before she was 18 years old sometimes we had a hard time 
getting providers to give us information. That is not because 
of HIPAA. It is because the providers misinterpreted HIPAA, and 
so when we hear these tragic stories today, and I am hoping I 
will get back for that, I think that we need to really take 
that seriously, but we need to look at ways to educate 
providers.
    In the aftermath of the murder of 32 people at Virginia 
Tech we learned that HIPAA interpretations prevented mental 
health professionals from appropriately sharing information. 
Misinterpretations of HIPAA and other private laws were also 
identified by the GAO and by President Obama's Gun Violence 
Task Force as an obstacle to reporting individuals who should 
be barred from gun ownership to the next background check 
system.
    And so, Mr. Rodriguez, I think you would say HHS has tried 
to be responsive to these concerns that interpretations of 
HIPAA and other privacy rules have created obstacles. Is that 
correct?
    Mr. Rodriguez. That is correct. That is why we----
    Ms. DeGette. And, in fact, you sent a letter out on January 
15 of this year to health providers around the country, trying 
to delineate exactly what HIPAA says. Correct?
    Mr. Rodriguez. Yes, we did.
    Ms. DeGette. Now, tell us why you sent this letter.
    Mr. Rodriguez. We thought that because of all the concerns 
about the interaction between situations where a provider is 
aware of information indicating danger to either the patient or 
others, and some of the events that we have been hearing about 
in recent years, that it was important to remind providers of 
the--of both the duty, the permissions under HIPAA, but also to 
remind them to consult with their applicable ethical standards 
and their applicable State laws that clearly do give them a 
pathway to report in these kinds of situations.
    Ms. DeGette. Thank you, and HHS recently issued an advanced 
notice of proposed rulemaking to solicit public comments on 
HIPAA and its perceived barriers to the reporting of 
individuals to NICS due to mental health concerns. Is that 
correct?
    Mr. Rodriguez. That is correct.
    Ms. DeGette. And can you explain very briefly why this 
advanced notice of rulemaking is necessary and what information 
you are trying to collect?
    Mr. Rodriguez. Sure. In most States reporting as to 
disqualifying information for NICS actually comes from the 
judicial system, which is not covered under HIPAA. We are aware 
at least generally about some examples--New York State until 
recently was one very clear example of a State where reporting 
occurred from entities that are, in fact, covered by HIPAA, and 
reporting would ordinarily have been prohibited by HIPAA. We 
want to understand where and to what extent HIPAA is a barrier 
in those cases and take any appropriate steps to----
    Ms. DeGette. Thank you.
    Mr. Rodriguez [continuing]. Remove those barriers.
    Ms. DeGette. OK. Just one last question.
    Now, the Affordable Care Act, it extended insurance to 
dependents up to the age of 26. Correct? Yes or no?
    Mr. Rodriguez. That is correct.
    Ms. DeGette. Yes, but it didn't say that individuals up to 
the age of 26--maybe that this a good question for you, Mr. 
Rothstein. It didn't say individuals up to an age of 26 were 
still considered legally dependents of their parents because 
they are getting health insurance. Is that correct?
    Mr. Rothstein. Yes.
    Ms. DeGette. And, in fact, the provision of the Affordable 
Care Act didn't even talk about HIPAA, did it?
    Mr. Rothstein. Correct.
    Ms. DeGette. That is correct. OK. Thank you.
    Mr. Chairman, I would ask unanimous consent to put this 
January 15, 2013, letter from the Director to providers into 
the record.
    Mr. Murphy. Without objection we will----
    Ms. DeGette. Thank you very much.
    [The information appears at the conclusion of the hearing.]
    Mr. Murphy. Thank you. The gentlewoman's time has expired.
    I now recognize Dr. Gingrey from Georgia for 5 minutes.
    Mr. Gingrey. Mr. Chairman, thank you, and thank you very 
much for calling this very important hearing. You know, I am 
sitting here thinking as a physician member of the subcommittee 
that it is kind of ironic, isn't it, that this law passed in 
1996, HIPAA. It almost sounds like the Hippocratic Oath, which, 
of course, in the first place, do no harm. It really in a way 
has nothing to do with the Hippocratic Oath, which is hundreds, 
if not thousands, of years old, but in a way it does touch on 
that in the first place, do no harm, in regard to how you treat 
a patient but also this information sharing because if it is 
not done correctly, great harm, there is potential for great 
harm, not only for the patient but to the general public. So I 
just think that I find that sort of ironic.
    Mr. Rodriguez, when was the last time that the Office of 
Civil Rights under HHS updated the Healthcare Provider's Guide 
to the HIPAA Privacy Rule posted to the OCR Web site? And how 
about the Patients' Guide? Same thing.
    Mr. Rodriguez. Congressman, Doctor, we are updating 
guidance on a routine basis as different issues comes up. As 
you know, we issued a major rule that profoundly affects both 
consumers and providers in January of this year, and so we have 
been busy posting updates relevant to that rule.
    Mr. Gingrey. That was that January 25 rule?
    Mr. Rodriguez. That is correct. Similarly, when we 
identified the concerns about gun violence after the Newtown 
shooting, we took immediate and decisive steps to put up this 
reminder about the manner in which HIPAA interacts with the 
duties to warn. We are updating our information on a very----
    Mr. Gingrey. Well, these guides answer common questions 
about HIPAA. Correct?
    Mr. Rodriguez. That is correct.
    Mr. Gingrey. And do you ever receive input from either the 
general public or the healthcare providers about the 
effectiveness of these updates?
    Mr. Rodriguez. We do. We speak routinely to both consumer 
groups and provider groups. My door is always open. In fact, I 
took the initiative this morning to connect with several of the 
family members here today because I want to hear from them. I 
want to know these concerns and make sure that we are getting--
--
    Mr. Gingrey. I am going to come right back to you, but Mr. 
Rothstein, are you familiar with these guides? Do you have any 
sense of how effective they are?
    Mr. Rothstein. Well, I am not sure how effective they are, 
but I can comment generally about the Outreach in Education 
Program and with all due respect to OCR and HHS, I think we 
have a major problem in this area. If you read the regulations, 
there are ample places where these kinds of issues, the problem 
of notifying parents, the problem of notifying individuals who 
are at risk, is spelled out. But HIPAA is a very misunderstood 
regulation. It is misunderstood by the public, it is 
misunderstood by healthcare providers and----
    Mr. Gingrey. Well, let me interrupt you to say that I fully 
agree with you, and as a practicing physician for a long time 
before I came here 10 years ago, I knew that, and I think, in 
fact, I wonder if some physicians don't hide behind if I just 
move onto the patient, not want to be bothered with an aunt or 
an uncle or a cousin, in regard to questions about their loved 
one. I hope that doesn't exist too much, but, I mean, it is 
something that we need to think about.
    Let me go back to the Director of the Office of Civil 
Rights, Mr. Rodriguez. How does OCR measure? Now, I think when 
I was talking to you just a second ago, it sounded like it was 
more anecdotal from your perspective, but how does OCR measure 
whether the clarifications that you referenced January 25 of 
this year, indeed, how do you measure how they are working? For 
example, have the number of privacy rule complaints filed under 
the various complaint categories been trended downwards with 
every further clarification, hopefully this most recent one 
from OCR? Does OCR keep track of this? Do you think this will 
be a helpful metric to track in judging the performance, your 
performance of your outreach and education efforts concerning 
the privacy rule?
    Mr. Rodriguez. So answering the first part of your 
question, Congressman, the truth is our caseload has remained 
steady, and in fact, has grown slightly over the years since we 
commenced enforcement. We've received something in the order 
of, I think, approximately 80,000 complaints since we first 
began receiving complaints, and the amount has been fairly 
steady over the years.
    Part of what is going on here is HIPAA's still new, you 
referenced 1996, but our rules really didn't become final until 
2003 and 2005. And so there has been a learning curve over the 
years both for consumers and providers to understand what HIPAA 
requires and what it authorizes, and we often emphasize that 
HIPAA's flexible and scalable, meaning that it is really meant 
to be designed for a very wide variety of healthcare scenarios.
    I agree generally that our caseload is certainly an 
indicator. I don't think it is the only indicator of how well 
folks are understanding the requirements. I certainly agree 
with that proposition. I think there have been surveys. I am 
not able to speak to them specifically right now in terms of 
where patient concerns are, where provider concerns are, but we 
certainly do hear a lot of anecdotal information as you 
described.
    Mr. Gingrey. Mr. Chairman, thank you for allowing the 
witnesses to answer, and I yield back.
    Mr. Murphy. Thank you.
    Mr. Gingrey. Thank you both.
    Mr. Murphy. I now recognize the gentleman from Iowa, Mr. 
Braley, for 5 minutes.
    Mr. Braley. Thank you, Mr. Chairman, for holding this very 
important hearing which deals with the ongoing struggle between 
patient privacy and protecting the public safety, and these are 
not easy issues to deal with, but I think part of the 
challenges we faced and part of the concerns of family members 
who have been dramatically impacted by our inability to solve 
this problem is that these particular provisions you have been 
talking about, Mr. Rodriguez, are commonly known as the Duty to 
Warn Provisions, and yet to most of us who understand duty to 
warn, a duty is a mandatory obligation, not a permissive 
requirement. And even though I understand completely your 
explanation of how this permissive disclosure is then subject 
to State laws dealing with mandatory disclosure, I think many 
healthcare professionals, particularly mental healthcare 
professionals, look at the HIPAA language, see that it is 
permissive, and that is the end of the story for them.
    And I would like to hear from both of you how are we 
educating the public and more specifically mental healthcare 
providers about this bridge between supposedly mandatory Duty 
to Warn Provisions that are actually permissive and State law 
requirements that might be mandatory?
    Mr. Rodriguez. So that is one of the issues that I think 
the drafters of our rule in this area were attempting to 
tackle, because we are talking about, I think you are correct, 
we are talking about both duties and authorities to warn. In 
other words, when we are talking about the Tarasoff example, 
there we are talking about an actual duty to warn or to 
protect.
    Mr. Braley. But based on State law. Not based upon the 
language of HIPAA.
    Mr. Rodriguez. Correct. HIPAA is really meant to get out of 
the way of those duties and authorities and to clear a wide 
enough lane for those duties and authorities to be utilized and 
implemented by providers and for professional judgment to 
really be the hallmark of when disclosure occurs.
    Mr. Braley. Well, one of the first forums we had on this 
subject one of our witnesses was Pete Early, who wrote this 
book about his son's journey through the mental health system 
and criminal justice system, and he noted appropriately in here 
that in 1963, President Kennedy signed a National Mental Health 
Law that authorized Congress to spend up to $3 billion in the 
coming decades to construct a national network of community 
mental health centers, and then notes on the next page that 
Congress never got around to funding or financing community 
mental health centers.
    So the process of deinstitutionalization moving from State 
mental health institutions to community-based mental healthcare 
that was supposed to happen instead became a process where more 
and more people wound up in the criminal justice system, and we 
now have law enforcement officers who often are providing 
frontline mental healthcare. And I think for the families of 
some of the victims who have experienced firsthand the loss of 
a loved one because of our inability to bridge this gap, 
especially when a patient is accompanied to a treatment 
facility by law enforcement officials who have a duty to 
protect the public safety and they aren't provided information 
about the release of that patient, even though there may be a 
prior history of threats, how do we get to the point where we 
are protecting the patient's privacy and at the same time 
making sure that we aren't blocking the disclosure of 
information that can protect the public?
    Mr. Rodriguez. I certainly think we need to continue our 
educational efforts, and, again, that is why that initiative--
which, incidentally, was widely covered in professional media--
of the reminder we sent in January was something that was 
really embraced by the mental health profession as a reminder 
to them that at least HIPAA, I can't account for all the 
professional codes and State laws that also apply here, but at 
least HIPAA in those kinds of situations where a danger is 
posed does not stand as an obstacle to providers acting in the 
interest of the patient and of public safety.
    I think it is also worth noting, you know, that there is a 
countervailing concern that patients who fear that their 
information will not be confidential won't get treated, and I 
think that is why, Congressman, when you talked about that 
delicate and difficult balance, that is the balance that both 
our regulations and healthcare providers I believe are trying 
to strike.
    Mr. Braley. Mr. Rothstein, one of the other concerns that 
Mr. Early raises is that if we have a child in a divorce 
proceeding or a custody proceeding, the number one role of the 
court system is to decide what is in the best interest of the 
child. That is their principle focus. And yet when we have 
adult patients who are getting mental health treatment who may 
or may not be able to make decisions about their own treatment 
needs, oftentimes the legal criteria are not what is in the 
best instance of the patient but protecting the patient's 
wishes from a legal standpoint and that often the advocates 
focus on that rather than getting the best treatment option 
that would benefit them in society.
    What are the obstacles we need to face to deal with that 
problem?
    Mr. Rothstein. It is a very difficult question. The 
immediate test would be whether the individual is competent, 
and if the individual is competent, healthcare providers tend 
to overlook all the other tests. If the individual is competent 
and a threat to self or others, then that overrules the 
competency issue. If the individual is incompetent, unable to 
make reasoned decisions about his or her mental health, then 
the confidentiality protections would not apply.
    Mr. Braley. Thank you.
    Mr. Murphy. The gentleman's time has expired.
    I now recognize the gentlewoman from North Carolina, Ms. 
Ellmers, for 5 minutes.
    Mrs. Ellmers. Thank you, Mr. Chairman, and thank you for 
holding this very, very important mental health hearing, 
especially in lieu of the forum that we had a couple of weeks 
ago with the family members. You know, that was a very 
important, emotional, and revealing discussion that we had, 
which brings me to some of the questions that I have because I 
have practiced in healthcare. I am a nurse. My husband is a 
general surgeon, and you know, HIPAA can sometimes get in the 
way, and as healthcare professionals I would say that you would 
typically err on the side of protecting the patient's 
confidentiality and yourself--as a healthcare professional.
    Mr. Rodriguez, I would like to ask you since the 
implementation in 2003, according to my information HHS has 
received over 79,920 HIPAA complaints. What is the procedure 
when a complaint comes in?
    Mr. Rodriguez. Sure. The first thing we do is assess 
whether, in fact, it is a HIPAA complaint at all or whether the 
complaint is about some other issue outside of our 
jurisdiction. If we determine that we do have jurisdiction, we 
then conduct an inquiry.
    Mrs. Ellmers. OK.
    Mr. Rodriguez. Conduct an investigation into the 
allegations. If we determine that there were violations of 
relevant HIPAA requirements, we then ordinarily work with the 
entity--I am going to talk about the exception in terms of our 
Monetary Enforcement Program--work with the entity to correct 
whatever the deficiencies are in their practices in order for 
them to go forward and be compliant----
    Mrs. Ellmers. OK.
    Mr. Rodriguez [continuing]. In those areas. Now, through 
HITECH as you know, we received enhanced monetary enforcement 
authorities, particularly directed at concerns about the 
security of electronic health information.
    Mrs. Ellmers. OK.
    Mr. Rodriguez. And so, since HITECH was passed, our 
enforcement has specifically focused on security rather than 
the use and disclosure issues that we have been talking about 
here, and has, in fact, grown, and in fact, it has been a 
priority of mine to grow our enforcement to protect the 
confidentiality of electronically----
    Mrs. Ellmers. OK.
    Mr. Rodriguez [continuing]. Maintained information.
    Mrs. Ellmers. Yes. Very important. Mr. Rothstein, can you 
tell me, since implementation of HIPAA have there been 
significant law suits filed? Is that something that you would 
have information about with alleged HIPAA violations? And when 
I say lawsuits, I mean against healthcare professionals.
    Mr. Rothstein. Right. Well, HIPAA does not provide for a 
private cause of action.
    Mrs. Ellmers. OK.
    Mr. Rothstein. There have been a few lawsuits alleging 
invasion of privacy or some other----
    Mrs. Ellmers. OK. So it would have to be----
    Mr. Rothstein. But they refer to HIPAA violations, but 
HIPAA doesn't provide for those.
    Mrs. Ellmers. OK, and there again, I get back to the issue 
of healthcare providers who would err on the side of less 
information is probably better--just, always looking out for 
the patient and, unfortunately, always having to cover your own 
self. And that is one of my areas of concern with HIPAA, 
because I do believe it is a gray area and is left up to too 
much interpretation.
    So, Mr. Rodriguez, my final question here, I have a little 
over a minute, do you have a sense of how often hospitals and 
staff actually go over the HIPAA regulations and make sure that 
they are up to date? Is that done on an annual basis?
    Mr. Rodriguez. It is, Congresswoman, variable. We actually 
did an audit program last year, which is another program 
required under HITECH, and this was a pilot, and we found a 
wide range. We found some institutions that take those 
obligations seriously, do them on a regular, annual basis, 
ensure that new employees are trained, but there are also many 
providers where that is not the case. The compliance is all 
over the board.
    Mrs. Ellmers. OK. There again, unfortunately, so many 
things fall on this information. I think this is definitely one 
of those areas. So thank you very much, and I yield back the 
remainder of my time.
    Mr. Murphy. I now recognize Mr. Butterfield for 5 minutes.
    Mr. Butterfield. Thank you, Mr. Chairman. Let me begin by 
thanking both of you for your testimony today. I thank you very 
much. It is obvious that you all are both well prepared.
    I will address this question to Mr. Rodriguez. Mr. 
Rodriguez, following the Newtown tragedy President Obama took 
appropriate action by clarifying to healthcare providers in 
writing their duty to warn law enforcement authorities of 
threats of violence.
    First of all, is that true?
    Mr. Rodriguez. That is true. I signed the letter, but it 
was at the President's direction.
    Mr. Butterfield. OK. That was going to lead me to my 
question was it a letter or an executive order, or what was it? 
It was a letter from your office.
    Mr. Rodriguez. The letter was really a reminder of existing 
duties under the law and also of the Administration's emphasis 
that these authorities to warn and these duties to warn should 
be fully exercised to protect the public safety.
    Mr. Butterfield. And has that action had any impact as far 
as you can determine?
    Mr. Rodriguez. It has had impact in the sense that there 
has been renewed discussion about these issues. There was 
extensive industry media coverage of the letter, and so, 
therefore, we believe, based on that, that the reminder reached 
the folks it needed to reach, which are particularly those 
mental health providers.
    Mr. Butterfield. And about how many letters actually went 
out from your office?
    Mr. Rodriguez. They were posted on our Web site and then 
disseminated by both press release and through various listers 
that HHS has.
    Mr. Butterfield. Can you describe, Mr. Rodriguez, 
additional ways the Health Information Technology, HIT, for 
Economic and Clinical Health Act, which we passed in the 
Recovery Act, has improved privacy and security requirements 
for patient records?
    Mr. Rodriguez. Sure. I appreciate that question. First of 
all, it has done so by bringing business associates within the 
ambit of the privacy and security worlds. That is those 
contractors who serve healthcare providers, and in fact, often 
come into possession of large quantities of protected health 
information. We now directly regulate them as we directly 
regulated healthcare providers before that. It increases the 
penalties for violation of HIPAA, which we have used 
extensively for security violations, and it also establishes 
requirements that breaches of health information need to be 
reported to our office, to the affected patients, and in cases 
of larger breaches, also be reported to prominent media that 
will be seen by the affected patients.
    Mr. Butterfield. All right. My third question follows. Can 
you describe the training that medical professionals receive to 
ensure they adhere to HIPAA?
    Mr. Rodriguez. Sure. To my knowledge, and I wouldn't 
consider this a comprehensive answer, but certainly training on 
HIPAA is offered at many professional conferences. In fact, we 
actually have prepared a series of videos that have been 
posted, and several more that will be posted on Medscape, 
including some that are, by the way, relevant to the topic we 
are discussing here, that discuss various aspects of the 
privacy and security rules.
    We are particularly concerned about smaller providers who 
don't necessarily have the resources of larger institutions. So 
we are looking for opportunities to reach them.
    I also understand that there are medical school curricula 
that touch on these issues as well.
    Mr. Butterfield. It is my understanding that healthcare 
providers covered by HIPAA must notify patients if the privacy 
of their health information is breached. What methods are used 
to notify those individuals?
    Mr. Rodriguez. They should ordinarily be notified in 
writing, and, again, we also in certain cases provide for 
notification through the media.
    Mr. Butterfield. All right. Finally, Mr. Rothstein, Dr. 
Rothstein, even with HIPAA protections we have heard that 
privacy concerns can cause individuals to actually avoid 
treatment. I am not sure I knew that.
    Could increasing information sharing through HIPAA cause 
fewer individuals to seek treatment?
    Mr. Rothstein. That certainly is a concern, especially 
individuals who have sensitive information that they are 
worried will be disclosed. Yes.
    Mr. Butterfield. All right. Mr. Chairman, I yield back.
    Mr. Murphy. I thank the gentleman.
    Dr. Cassidy is not a member of the Oversight and 
Investigations Subcommittee but has asked for an opportunity to 
join us and without objection we will allow him 5 minutes to 
ask questions. Dr. Cassidy.
    Mr. Cassidy. Thank you, Chairman Murphy.
    Gentlemen, I am a practicing physician, will see patients 
this Tuesday morning, and I have a sense that you two are 
incredibly bright and well-versed in this law and is totally 
divorced from the reality of an ER physician seeing 20 patients 
in a shift, and at 3:00 a.m. there is a person who comes in 
with these issues.
    I will just tell you, and I will also tell you that 
physicians fear the Federal Government. They understand that if 
the Federal Government comes after them and grabs them in their 
long legal arm, the physician may ultimately win, but she is 
destroyed in the process.
    Now, I listened to what you say how this would allow 
certain forms of communication, but I will also say when I read 
that the maximum penalty is 1.5 million, when the physician is 
having their in-service on HIPAA, that is what they remember, 
and when they understand that it is permissible not to give 
information, but you may get in trouble if you do, I can tell 
you that guy, that gal seeing the patient at 3:00 a.m. with 20 
patients doesn't have your expertise, but what they do have are 
examples of physicians who had been grabbed by the law and not 
let loose until every one of their personal resources had been 
exhausted.
    Now, that is just a comment borne out of incredible 
frustration with this sense that the Federal Government is this 
benign entity that the American people have no reason to fear. 
Indeed, it has great reason to fear, and so people act 
cautiously.
    Now, that said, after my rant, I apologize, let me ask a 
couple things. We say that the doc may communicate with the 
family if there is imminent danger, but what if the patient is 
non-compliant? Can the family say to the mother of the adult 
child who lives with her, your son is not taking his medicines, 
and therefore, we need to do something about that? Can the 
physician do that?
    Mr. Rodriguez. So, again, we go back to the idea of serious 
risk to health or safety. So we are not talking about imminent 
danger in the sense of somebody violent going out, and it 
certainly includes that scenario, but it is much broader than 
that. So if the patient's health would be seriously, adversely 
affected and the provider's communication of that information 
to the parent would provide a way of eliminating or at least 
reducing that threat, then HIPAA provides them clear authority.
    Mr. Cassidy. So the specific example, the patient is 
bipolar, and I am a little rusty on my psyche so this medicine 
may no longer be used, but assume that they are on Lithium, and 
their Lithium level shows that it is low, the patient is not 
taking their drug. We have documented fact. Can the doc say to 
the mom, your son is not taking his Lithium?
    Mr. Rodriguez. You also might have heard the beginning of 
my testimony. We were also talking of cases of incapacity.
    Mr. Cassidy. Of what? I am sorry.
    Mr. Rodriguez. Of incapacity.
    Mr. Cassidy. No. I am not saying they are incapacitated 
because when that level falls, they don't immediately become 
incapacitated. They are just on the potential verge of being 
but they can still seem sane.
    Mr. Rodriguez. Well, then I think the pathway is--if the 
result of that would be serious and imminent threats to that 
individual's health, then HIPAA provides a path for those 
communications.
    Mr. Cassidy. There seems to be a little bit of wiggle room 
there. The guy could get back on his dose and bring it back up 
to snuff. I am not sure the physician would find a safe harbor 
in that kind of answer.
    Mr. Rodriguez. Well, I think the greater safe harbor, 
Congressman, would be this: We have received 80,000 complaints 
since we began enforcing. Only 12 of them have resulted in 
monetary penalties.
    Mr. Cassidy. I accept that, but what you are talking about 
is a fellow seeing patients 20 in a shift at 3:00 a.m. in the 
morning who doesn't have your expertise. That is the reality, 
and I can tell you that what you hear in that in-service is 
that if you violate HIPAA, they are going to turn you every 
which way but loose. I can tell you that is what the in-service 
is because I have been there.
    Mr. Rodriguez. I would love to see those in-services 
because they are not consistent with our enforcement history.
    Mr. Cassidy. Secondly, it says here that the patient 
healthcare provider is not permitted to share personal 
information with the family or friends of an adult who tells 
the provider not to do so. What if that patient is incompetent? 
What if they actually at this point in time are not lucid? They 
think that there is black helicopters circulating and that 
their mom is the pilot of one of them.
    Mr. Rodriguez. And that is why I mentioned that, certainly 
in cases of incapacity, and certainly incapacity can include a 
situation where a patient is far from lucid, then in those 
cases there is also a basis for----
    Mr. Cassidy. Now, sometimes lack of lucidity is in the eye 
of the beholder. I will tell you that there is a Wall Street 
Journal article about William Brice or Bruce, I forget which, 
in which the young man was released and went out and killed his 
mother with a hatchet. And so clearly he was considered lucid 
enough to be released.
    I am sorry. I am out of time. I apologize. I will have to 
forego. I yield back. I am sorry.
    Mr. Murphy. The Chair is going to ask that everybody be 
permitted 1 minute of additional questions, and then we will 
get onto our next panel, recognizing we have votes coming up 
soon. So we will do 1 minute.
    Mr. Rodriguez, as you are aware, States have said, 
confusion over HIPAA has prohibited them from sharing 1.5 
million records with the National Instant Background Check 
System of persons who have been involuntary committed to mental 
health treatment or deemed mentally incompetent by a court of 
law and are, therefore, prohibited from owning a firearm. Our 
committee sent a letter to HHS on February 13 asking about 
HIPAA interfering with this NICS list. I note that HHS has now 
announced it would be soliciting feedback on HIPAA reform.
    Why do you believe States are not uploading those records?
    Mr. Rodriguez. I certainly have heard of HIPAA as one of 
several different reasons, so I don't understand HIPAA to be 
the only reason. I know certainly in the case of New York State 
their reporting was coming out of, or their reporting would 
have had to have come out of, what was a HIPAA-covered entity 
and therefore, reporting would have been prohibited, and we are 
now looking to eliminate that kind of barrier. Beyond New York 
I don't know if there are others.
    Mr. Murphy. Can you get us a written response to the 
subcommittee on this issue clarifying it?
    Mr. Rodriguez. Sure.
    Mr. Murphy. Thank you. Mr. Braley, 1 minute.
    Mr. Braley. Mr. Rothstein, we were talking earlier about 
some of the challenges faced with the incredible burdens placed 
on law enforcement officials, our penal systems to provide 
front-line mental healthcare. This has been a dramatic shift in 
what has happened since Congress passed legislation trying to 
promote community-based mental health.
    So we now have this long learning experience, and people 
who care about the rights of the mentally ill, like I do, 
people who care about protecting public safety, like I do, want 
to know what we have learned from these experiences as we move 
forward and try to create a balanced system that is protecting 
the public and the rights of patients to get the best possible 
treatment when obviously we have been failing them. What can we 
do about that?
    Mr. Rothstein. Well, Mr. Braley, that is a difficult 
question. On the one hand we need to increase the funding and 
wherewithal of community mental health services. That is for 
sure. What we can address at this hearing today is the 
importance of getting out the message of what HIPAA does and 
does not require.
    One of the problems overall is that HIPAA was intended to 
be a floor above which medical ethics and State law would take 
place, but in many areas, including mental health areas, it is 
the floor, and there is nothing else above it.
    Mr. Murphy. If you can offer a written response, too, we 
would appreciate that, because we are going to need more 
detail.
    Dr. Gingrey, you are recognized for 1 minute.
    Mr. Gingrey. Mr. Chairman, thank you. I don't know if I can 
do this in a minute but quickly.
    Mr. Rodriguez, on January 25, 2013, HHS published a final 
rule that makes, and I quote, ``significant modifications to 
marketing by third parties to patients for purposes of 
identifying potential beneficial health opportunities for 
patients.'' For instance, many drug companies use third parties 
to help identify patients in need of care for purposes of 
inclusion in clinical trials. Some of these patients, including 
those from my own district, have chronic illnesses for which no 
other treatment option exists.
    Would this service still be allowed if such a company, 
third-party company, did not first get the patient's consent?
    Mr. Rodriguez. It is a long answer, so I will take 
advantage of the opportunity to offer it in writing.
    Mr. Gingrey. All right. Thank you, and I yield back.
    Mr. Murphy. Dr. Cassidy, 1 minute.
    Mr. Cassidy. Mr. Rothstein, I am little concerned. You 
mentioned the point there is 26 percent of the people who have 
a diagnosed mental disorder in 1 year, but really if you talk 
about serious mental illness it is really a much smaller 
percentage.
    Mr. Rothstein. Of course.
    Mr. Cassidy. And those are the folks who are incompetent 
that, I mean, believe me, I speak from personal experience of 
family members and of friends who have been in this situation. 
Don't you think it is a little disingenuous to say, OK, here is 
a group that truly are out of it as opposed to this 26 percent 
that have situational depression or such like this.
    Wouldn't it be more honest to kind of focus upon that SMI 
group for their sake, their family's sake as a unique group?
    Mr. Rothstein. Oh, absolutely, but the point I was trying 
to make was, if legislation were enacted that made all mental 
health records more discloseable----
    Mr. Cassidy. So you would accept maybe SMI under very 
guarded circumstances----
    Mr. Rothstein. Of course.
    Dr. Cassidy [continuing]. As opposed to the broader 26 
percent of the population?
    Mr. Rothstein. That is correct, but I am worried about the 
discouragement of the 26 percent.
    Mr. Cassidy. I would just say, someone who has got bipolar 
or schizoaffective oftentimes does not have that insight, and I 
think we have to be kind of honest about that. They have an 
acute break, and they have no insight whatsoever. As a guy who 
has worked with such patients and who has had close people 
associated.
    I yield back. Thank you.
    Mr. Murphy. Thank you. Mr. Rodriguez, Mr. Rothstein, thank 
you so much for being with us today, and we appreciate your 
availability in the future to respond to questions.
    As they are stepping up, we ask the folks to get ready for 
the second panel. I would like to make an announcement.
    As we continue on with our previous hearing after Newtown 
and also this one on HIPAA, this committee is exploring issues 
of a wide range that deal with mental illness and proper 
treatment, et cetera, because of our concerns.
    I want to make it very clear, all members are aware of 
this, but certainly members of the audience and people who may 
be watching this also, at no time does this committee at any 
time communicate that those with mental illness are those who 
are responsible for violence. We recognize that victims, that 
they are actually 11 times more likely to be victims of violent 
crime than the non-mentally ill, and the vast majority of 
people with mental illness are not violent. It is very 
important we understand that.
    Could the next panel please take their seats, and we will 
move forward then?
    As you sit down I will be introducing you. On the second 
panel we have Dr. Richard Martini. He is a Professor of 
Pediatrics and Psychiatry at the University of Utah School of 
Medicine and the Chair of the Department of Psychiatry and 
Behavioral Health at the Primary Children's Medical Center in 
Utah. For full disclosure I want to say that when I was on the 
staff at Children's Hospital in Pittsburgh he was one of my 
students. How time flies.
    We also have Ms. Carol Levine. She directs the United 
Hospital Fund Families and Health Care Project, which focuses 
on developing partnerships between healthcare professionals and 
family caregivers, especially during transition in healthcare 
settings.
    Next we have Mr. Gregg Wolfe. Mr. Wolfe is the father of a 
son who suffered from mental illness and substance addiction.
    Then we have Mr. Edward Kelley. Mr. Kelley is also a father 
of a son with mental illness.
    And Mr. Braley, would you like to also recognize your guest 
today?
    Mr. Braley. Yes. Thank you, Mr. Chairman. I am thrilled to 
have one of my constituents testify today, Jan Thomas, from 
Parkersburg, Iowa. She has a story to tell about this gentleman 
who was featured in Sports Illustrated after he was gunned down 
by a former student. He was the NFL national high school coach 
of the year with four of his former players playing in the 
National Football League, and Jan has an important story to 
share with us about these issues.
    Mr. Murphy. Thank you and finally we have Ms. Deven McGraw. 
Ms. McGraw is the Director of the Health Privacy Project at the 
Center for Democracy and Technology.
    As you all are aware, the committee is holding an 
investigative hearing, and when doing so, has a practice of 
taking testimony under oath. Do any of you have any objections 
to testifying under oath?
    The Chair then advises that under the rules of the House 
and the rules of the committee you are entitled to be advised 
by counsel. Do you desire to be advised by counsel during your 
testimony today?
    All answer negatively. In that case would you all please 
rise and raise your right hand, and I will swear you in.
    [Witnesses sworn]
    Mr. Murphy. The Chair recognizes all of the participants 
answered in the affirmative. You are now under oath and subject 
to the penalties set forth in Title XVIII, Section 1001 of the 
United States Code. You may each now give a 5-minute summary of 
your written testimony.
    We now recognize Dr. Martini for 5 minutes. Make sure your 
microphone is on and pulled close. Thank you.

TESTIMONY OF RICHARD MARTINI, M.D., PROFESSOR OF PEDIATRICS AND 
   PSYCHIATRY, UNIVERSITY OF UTAH SCHOOL OF MEDICINE, CHAIR, 
    DEPARTMENT OF PSYCHIATRY AND BEHAVIORAL HEALTH, PRIMARY 
CHILDREN'S MEDICAL CENTER; CAROL LEVINE, DIRECTOR, FAMILIES AND 
HEALTH CARE PROJECT, UNITED HOSPITAL FUND; GREGG WOLFE, FATHER 
   OF A SON WITH MENTAL ILLNESS AND SUBSTANCE ABUSE; EDWARD 
KELLEY, FATHER OF A SON WITH MENTAL ILLNESS; JAN THOMAS, FAMILY 
  IMPACTED BY HIPAA; AND DEVEN MCGRAW, DIRECTOR OF THE HEALTH 
      PRIVACY PROJECT, CENTER FOR DEMOCRACY AND TECHNOLOGY

               TESTIMONY OF RICHARD MARTINI, M.D.

    Dr. Martini. Good morning, Chairman Murphy, members of the 
subcommittee. I also want to say I am also an immediate past 
Board Member of the American Academy of Child and Adolescent 
Psychiatry, who paid for my travel here today. Thank you for 
inviting me to come and to speak with you about HIPAA and its 
implications of clinical practice and to participate in this 
discussion. Throughout my testimony I will be reviewing patient 
summaries that are based upon my clinical experience but that 
do not include easily-identifiable information.
    Decisions about the release of psychiatric information are 
certainly more straightforward when the patient is a minor and 
not emancipated. Parents or primary caregivers are involved in 
the process, are available not only to support the patient, but 
also to guide them into psychiatric care. Young patients do not 
typically recognize the nature or extent of their behavioral 
and emotional problems, and this is one reason why child and 
adolescent psychiatrists, as well as other pediatric mental 
health professionals, are trained to involve families in 
diagnosis and treatment. We also know that this improves 
outcome.
    All pediatric specialties struggle with the transition of 
patients from adolescence into young adulthood, from a period 
of dependence to a period of almost complete autonomy. Many are 
not prepared for the responsibility, particularly those 
patients that experience chronic medical illnesses, 
developmental delays, and psychiatric disorders. Families have 
provided a framework for their care and for many aspects of 
their life.
    One of my patients, a former patient with a mild form of 
autism, developmental delay, and an anxiety disorder was 
determined to move out of the home once he was employed. The 
parents knew, however, that he could not manage his money, that 
he was emotionally reactive when faced with new experiences, 
and he really could not track his medications. Nevertheless, he 
did not want his parents involved in routine care. It forced 
the parents to go to court, state that their son was not able 
to care for himself, and must be dependent. Unfortunately, the 
subsequent ruling in their favor was counter to our goals in 
psychiatric treatment, and it derailed his progress in therapy.
    Psychiatrists spend a lot of time negotiating 
communications between parents and their children, and we don't 
want to discourage anyone from accessing care, specifically 
those who will not seek treatment if they believe that someone 
will contact or involve their parents. However, the application 
of HIPAA regulations should be a negotiation with several 
options available to both the clinician and the patient. A 
patient of mine in his early 20s suffered from a long history 
of congenital kidney disease. He was in and out of the 
hospital, usually in the company of his mother. He came into 
treatment because he was angry and depressed over the 
circumstances of his disease and his subsequent organ 
transplantation. I wanted to involve the mother in therapy as a 
support, but he refused because he was concerned about how 
disappointed she would be given everything that they had gone 
through together. He was in treatment for about a year, and he 
was on antidepressant medications but dropped out of treatment 
because it was too difficult. Two years later, I ran into his 
physician who told me that he discontinued his kidney 
medications, went into renal failure, and died.
    Psychiatrists should be able to both respect the 
individuality of the adolescent or young adult under the legal 
protection of HIPAA and use the strengths of the family when 
necessary to support treatment. I recognize that allowing more 
communication and less privacy for an adult patient at risk for 
a serious mental illness is a significant change in the intent 
of the law, but must we wait for a patient to be considered at 
risk for imminent harm to self or others before seeking help 
from parents or family?
    Rules about confidentiality certainly affect situations 
that are relatively more common among adolescence and young 
adults, like going to college. Parents are told that even 
though they are going be paying the bills, they will not have 
access to any medical or psychiatric information without the 
student's permission. One such patient with a history of 
congenital heart disease and ongoing depression wanted to go 
away to college. Her parents wanted her to stay close to home. 
She prevailed, but within 3 months of going to school, she 
began to deteriorate both medically and psychiatrically. The 
Student Health Center knew that she was ill but without her 
permission could not contact the parents. If this patient had a 
really serious disorder with immediate consequences, the family 
may not find out about it until they receive a bill some 30 
days after the event. If there is a bias in these situations, 
should it be toward parental involvement more than away from 
it?
    Mental health professionals strive to do what is in the 
best interest of the patient, while preserving his or her right 
to privacy and protection under the law. The basis for civil 
commitment and family communication regardless of the patient's 
wishes has been risk of harm to self or others. I suggest that 
this standard be reexamined with the goal of involving families 
whenever possible.
    Thank you, Mr. Chairman.
    [The prepared statement of Dr. Martini follows:]

    [GRAPHIC] [TIFF OMITTED] T2190.016
    
    [GRAPHIC] [TIFF OMITTED] T2190.017
    
    [GRAPHIC] [TIFF OMITTED] T2190.018
    
    [GRAPHIC] [TIFF OMITTED] T2190.019
    
    Mr. Murphy. Thank you, and Ms. Levine, you are recognized 
for 5 minutes.

                   TESTIMONY OF CAROL LEVINE

    Ms. Levine. Chairman Murphy, members of the committee, 
thank you very much for inviting me here today. I am at the 
other end of the age spectrum. I work with family caregivers of 
older adults who are with multiple chronic illnesses, and I 
think the importance of my experience for your deliberations is 
that the misinterpretations of HIPAA which we have heard about 
from Mr. Rodriguez and Mr. Rothstein are far more pervasive 
than the specific questions of mental illness.
    There are about 42 million Americans who are taking care of 
their chronically-ill older parents or other relatives, and I 
can't tell you how many times I hear from family caregivers who 
have a parent in the hospital, and the family member is 
expected to do a wound care, multiple medications, monitor 
machines, make all the care coordination in the community, and 
when you ask about what do I need to know to do this, they say, 
well, I can't tell you because of HIPAA. And that is just 
simply wrong and why does it happen? Because of the two 
features that have already been mentioned.
    There is this training that emphasizes the scary aspects of 
HIPAA. It is often done in a way that if you say anything, you 
are going to be in big trouble. That--and if the training 
doesn't say that, then the informal communication among 
healthcare providers, particularly from the mid-level staff, it 
is not necessarily physicians but nurses, social workers, 
others, terrified that they are going to get sued, they are 
going to lose their job. Meanwhile, laptops lie all over the 
place. They are not paying attention to the actual security of 
this information.
    The second reason, and I think this is very pervasive, also 
alluded to, HIPAA has become a very convenient excuse to avoid 
difficult conversations with families. It takes time, it is 
sometimes uncomfortable, it has really nothing to do with 
privacy of the patient's information. It has to do with I 
don't--why am I--why do I have to talk to this daughter? Why 
can't I just tell the patient? Well, fine, if the patient is 
totally able to understand, but an 85-year-old woman with 
congestive heart failure, moderate dementia, 55 other 
medications and so forth, just cannot absorb that information.
    So I think that what we really need is far more education 
on a balanced level. I think it is instructive that our next, 
United Hospital Fund's Next Step in Care Web site, guides for 
family care, the most downloaded guide is the one to HIPAA. So 
people are confused, and they are looking for information. And 
I think that hospitals, the covered entities, wherever they 
are, need to be encouraged to provide understandable 
information to their patients, to the families, to everyone 
they deal with. You go to a hospital now, you get a piece of 
paper to sign or several pieces of paper, you can barely 
understand. I think only Mr. Rothstein and Mr. Rodriguez and 
several members of the committee here would actually be able to 
understand it, and mostly it is about what we could do with 
your information. It is not about protecting the patient's 
interests at all.
    I think my ultimate question is always whose interests are 
being protected? Is it the patient's interests? Is it the staff 
members' interests in not getting into trouble? I appreciate 
that. Or is it the institution's interests in not making any 
kind of--not being, also not being in trouble, and those are 
valid, but they should never override the good clinical care, 
the importance of good communication that older people, younger 
people, everyone needs to get the best possible clinical care. 
So it is a very pervasive problem. It goes beyond what you are 
specifically asking about, but I think in all it is a kind of 
waterfall. Once it starts, it keeps going, and we continue to 
hope for more clarification.
    Thank you.
    [The prepared statement of Ms. Levine follows:]

    [GRAPHIC] [TIFF OMITTED] T2190.020
    
    [GRAPHIC] [TIFF OMITTED] T2190.021
    
    [GRAPHIC] [TIFF OMITTED] T2190.022
    
    [GRAPHIC] [TIFF OMITTED] T2190.023
    
    [GRAPHIC] [TIFF OMITTED] T2190.024
    
    [GRAPHIC] [TIFF OMITTED] T2190.025
    
    [GRAPHIC] [TIFF OMITTED] T2190.026
    
    [GRAPHIC] [TIFF OMITTED] T2190.027
    
    [GRAPHIC] [TIFF OMITTED] T2190.028
    
    [GRAPHIC] [TIFF OMITTED] T2190.029
    
    [GRAPHIC] [TIFF OMITTED] T2190.030
    
    [GRAPHIC] [TIFF OMITTED] T2190.031
    
    [GRAPHIC] [TIFF OMITTED] T2190.032
    
    Mr. Murphy. Thank you, and Mr. Wolfe, you are recognized 
for 5 minutes.

                    TESTIMONY OF GREGG WOLFE

    Mr. Wolfe. Good morning, Chairman Murphy and members of the 
Oversight Committee. My name is Gregg Wolfe, CEO of Kaplan, 
Leaman, and Wolfe Court Reporting and Litigation Support and 
Federal Official Court Reporter for the Eastern District of 
Pennsylvania.
    I am very thankful for the invitation extended to me so 
that I may testify to address the necessary and dire need to 
change the HIPAA law regarding minors and legally emancipated 
adults who either have a mental disorder, disability, or drug 
and/or alcohol addiction. I will set forth the reasoning for 
the exception to our valuable HIPAA law, which will have a 
positive impact on our society.
    My son, Justin, was a gregarious, affectionate, caring, 
compassionate, and intelligent young man whose life came to a 
sudden end on December 19, 2012, from a heroin overdose at the 
very young age of 21.
    Justin had attended Drexel and Syracuse Universities for 
his freshman and sophomore years respectively, carried a 3.0 
GPA, but each year ended poorly due to aberrant behavior. 
Justin had been seeing therapists since he was 15 \1/2\ due to 
anxiety, OCD, and ADHD.
    He was placed on Adderall when he was almost 17 years old. 
Unlike physical illness, mental illness has a much longer 
maturation and duration until one discovers the effects and 
results with which to treat and possibly cure.
    In 2012, Justin told his mother that he was addicted to 
Percocets and Oxycontin. She, in turn, took him to our primary 
care physician without my knowledge, per Justin's request. At 
that time, Justin apprised the doctor of his addiction, but 
also, when his mother was not present in the room, he stated 
that he had been using heroin for a few months prior to that 
date.
    Justin had asked that I not be apprised of any of those 
substances and did not want his mother being informed of his 
heroin usage. Without the heroin usage, the doctor expressed 
dire concern to Justin's mother and told her to take him 
immediately to a recommended crisis center for treatment. 
However, upon departing the office, Justin convinced his 
mother, through his drug-manipulative behavior, to take him 
instead to a Suboxone doctor he knew of, which she did.
    Justin would not allow his mother into the treatment room. 
There Justin admitted to using heroin for the previous year, 
and he was prescribed Suboxone.
    Two months later, against Justin's wishes, I was only 
informed of his Percocet addiction and implored him to enter 
into drug rehabilitation treatment. Justin was working two jobs 
during this time, with little time to attend treatment. 
Additionally, he convinced his mother and I the Suboxone was 
helping him with his recovery.
    As another month passed, Justin was residing in his college 
apartment, and he finally hit rock bottom. We finally gave him 
an ultimatum, and he entered intensive outpatient treatment for 
5 weeks that summer. Once in rehab, I contacted the intake 
director to inquire about his progress. I was informed that he 
could not disclose any information under the HIPAA regulations. 
I was extremely frustrated as I could not be apprised of my 
son's condition.
    During Justin's 5-week rehabilitation, I sent him to see an 
experienced psychiatrist weekly, which ensued until his 
ultimate demise this past December. I explained to the 
psychiatrist his history with abuse, for which he tried to 
counsel Justin, as well as to prescribe medication for his 
depression, anxiety, and OCD. I later learned, however, upon 
Justin's passing, that he had not disclosed his heroin 
addiction to the psychiatrist, except to say that he had tried 
it once.
    Upon Justin's passing, his depression and OCD medication 
were found untouched in his apartment. Oddly, he continued to 
take his anxiety medication. Justin returned to school last 
fall at Temple University where he appeared to be doing well. 
He even joined AEPI, a wonderful fraternity, where he pledged 
and was fully supported by the brotherhood.
    However, Justin obviously was terribly and secretly 
addicted to heroin, in addition to having mental disorders. He 
died of an accidental heroin overdose just a few weeks later.
    Though doctors knew since May, 2011, no one in our family 
was aware that Justin was using heroin, a lethal and insidious 
drug. Everyone was in shock and disbelief when we found out. 
Nevertheless, it was too late.
    I have confronted numerous parents, and nine out of ten 
people are not aware that snorting heroin is an option, which 
is how Justin used the drug, not by injection. Most are also 
shocked to learn that heroin is only $5 to $10 a bag.
    It was alarming to learn that it is actually cheaper to buy 
a bag of heroin on the street than it is to purchase Percocet 
and Oxycontin. Even kids from affluent suburban neighborhoods 
like my son traveled to dangerous places like Camden, NJ, and 
North Philadelphia in Pennsylvania to buy drugs. Justin sold 
some of his personal belongings and items stolen from his 
mother, pawned his computer on several occasions, and actually 
sold his Suboxone and Adderall medication, which I learned 
after the fact by reading his text messages.
    I hereby request an exception be added to HIPAA allowing 
parents of minors with a mental disorder or addiction, who 
maintain legal residency in their parents' homes, living under 
the auspices of their parents' care, and who are under their 
parents' health insurance coverage as specified by President 
Obama, until the age of 26, access to that minor's medical 
records for the following reason: prevention of harm to 
individuals and to society.
    One. Any type of addiction or mental disorder can be life 
threatening to not only one's self but to society as a whole as 
indicative of the Newtown Massacres, Columbine, the Aurora 
shootings, to name just a few.
    Justin was non-violent and would never intentionally hurt a 
soul, but unintentionally his life cut short destroyed other 
lives including his younger brother, Austin, who is a Type 1 
diabetic, not to mention the individuals to whom he sold his 
Suboxone and Adderall. After Justin's passing, Austin told us 
of his reckless disregard when driving as well as when 
conducting some of his activities. Thank God he never hurt 
anyone on the road. I have pictures of Justin's apartment from 
his last months that demonstrate how he resided at college, 
including cigarette burns in his bedding from obviously nodding 
out, which could have set the apartment complex ablaze, 
resulting in injury or death to himself and others.
    Two. Justin's stepfather had taken him assault rifle target 
shooting on occasion for sport. Had we known about his heroin 
addiction, he would not have armed him. Justin had often asked 
my permission to become licensed to buy a gun, which I was 
against despite not knowing about his addiction. However, I am 
forever thankful for not allowing it, especially now that I 
know he was using a mind-bending drug.
    Mr. Murphy. Mr. Wolfe, I know--we are out of time. Can you 
give a final summary, and we can have you come back to that 
element two? Is there a final summary you can give to your 
statement there?
    Mr. Wolfe. I do. I have some very important points to make, 
and it will only take 3 or 4 more minutes.
    Mr. Murphy. I will give you an additional minute. Go ahead.
    Mr. Wolfe. Thank you.
    Three. Justin's lying and manipulation was the result of 
his heroin addiction. I have learned that heroin rewires the 
synapses of the brain so the only way to experience pleasure is 
by doing more of the drug. One becomes numb to all other 
surroundings, emotions, and empathy, thereby resulting in the 
aforementioned behavior.
    Drug-related deaths have risen steadily over the last 11 
years according to a study from the Center for Disease Control. 
In 2010, drug overdoses killed 38,000 people, making drugs a 
more common cause of death than car accidents, guns, or 
alcohol. By comparison, approximately 8,500 homicides were the 
result of firearms.
    According to a 2011, article in Psychology Today, 
accidental drug overdosing is the second most cause of death of 
young people in the U.S., exceeding attributable to firearms, 
homicides, or HIV AIDS.
    According to the U.S. Department of Health and Human 
Services, ``With an immature prefrontal cortex, which does not 
develop until 24 to 25 years old, even if teens understand that 
something is dangerous, they may still go ahead and engage in 
risky behavior. With young adults not having their frontage 
cortex fully developed, those with mental disorders and or 
addictions exacerbate the irrational behavior.''
    In many circumstances, parents know what is best for their 
children, especially if given the appropriate medical 
information with which to exercise judgment and guidance. In an 
effort to help other parents in similar situations, I have 
launched an all-out campaign to the media, President Obama, 
lawmakers in New Jersey, Pennsylvania, and Delaware, and 
Congressional leaders such as yourselves to call attention to 
this issue, and to lobby for adding additional language to 
HIPAA that may help protect troubled young adults and their 
communities from harm.
    Parents are unable to operate effectively in a vacuum, 
without knowledge by healthcare professionals about our drug-
induced, or mentally disabled, legally-aged children who do not 
have the wherewithal to reason or think rationally for 
themselves. The absence of rationale may result in life-
threatening decisions or, as in my son's case, premature death.
    HIPAA has exceptions for public health and safety built-in. 
Item number five under Permitted Uses and Disclosures whereby 
protected health information can be disclosed without an 
individual's consent, including serious threat to Health or 
Safety. Covered entities may disclose protected health 
information that they believe is necessary to prevent or lessen 
a serious and imminent threat to a person or the public, when 
such disclosure is made to someone they believe can prevent or 
lessen the threat, including the target of the threat.'' So it 
should stand to reason language addressing this particular 
safety hazard is prudent and necessary.
    In closing, I am hereby requesting the following language 
be added to this HIPAA exception to avoid ambiguity. Parents or 
legal caretakers of a minor and/or emancipated adult with 
documented drug abuse and/or mental health histories, who 
continue to cover the minor and/or emancipated adult with 
health coverage, and/or continue to support the individual 
financially, will have access to that individual's healthcare 
records until the age of 26 to prevent him/her or society from 
harm.
    Although Justin's family, friends, nor Justin himself, 
could not save him, it is my hope that with change Justin's 
situation can help save millions of young lives in the future. 
Addiction and mental disabilities wreak havoc on our society 
and affect all ethnicities and socioeconomic backgrounds.
    When you look at all the famous and intelligent people 
whose lives were tragically taken due to mental disturbances 
and drug abuse, this country has lost a wealth of talent and 
success which would have been an asset to the growth and 
strength of our Nation.
    Thank you very much.
    [The prepared statement of Mr. Wolfe follows:]

    [GRAPHIC] [TIFF OMITTED] T2190.033
    
    [GRAPHIC] [TIFF OMITTED] T2190.034
    
    [GRAPHIC] [TIFF OMITTED] T2190.035
    
    [GRAPHIC] [TIFF OMITTED] T2190.036
    
    [GRAPHIC] [TIFF OMITTED] T2190.037
    
    [GRAPHIC] [TIFF OMITTED] T2190.038
    
    [GRAPHIC] [TIFF OMITTED] T2190.039
    
    [GRAPHIC] [TIFF OMITTED] T2190.040
    
    Mr. Murphy. Thank you. Mr. Kelley, you are recognized for 5 
minutes. Mr. Kelley.

                   TESTIMONY OF EDWARD KELLEY

    Mr. Kelley. Thank you, Mr. Chairman. I am a father of a 
paranoid schizophrenic son. He was diagnosed at age 14, which 
means for half his life he has had this illness, and I am 
afraid I have some rather harsh news and some points to make 
that are going to fall in line, and I thank Congressman Cassidy 
for his comments because he really gets right to the point.
    My wife and I, upon learning of this diagnosis, embarked 
upon educating ourselves in every aspect of mental health 
treatment, including navigating the system, familiarizing 
ourselves with all the things that are in our way, and then we 
took upon ourselves to go out and educate others, and we have 
done that by teaching classes, we have done that by serving on 
boards, we have done that at speaking engagements, we have done 
it by raising money, and we have also done it by bringing 
people into our home and comforting them and helping them to 
cope.
    And so what I am going to tell you is that we are actually 
ashamed of ourselves as to what we did not know before our son 
became mentally ill, and I would dare say that if the members 
of this committee were to spend a couple of days with someone 
with psychosis, this would fly. You would change things 
tomorrow.
    And so what needs to happen is there needs to be 
recognition that there is a gaping hole, and I want to clarify 
something. There is a difference between anosognosia, which is 
lack of insight, and a psychotic episode. They are two entirely 
different things. Anosognosia can last for long, long periods 
of time and lack of insight, and you refuse treatment, and you 
don't want anybody to help you of any kind, most importantly 
your family members. Not just parents. Brothers, sisters, 
grandparents.
    And so what happens is, you are setting a stage for 
tragedy, literally propping it up because there is this gaping 
hole we are trying to teach or trying to address the needs of 
the severely mentally ill the same way we are the mainstream 
mentally ill population, and it doesn't work. It is illogical.
    My son has thought he has been a U.S. marshal looking for 
his gun. He has thought the aliens were invading him. He 
thought he was a secret agent. He thinks to this day he served 
in two Iraq wars. He has been naked in the snow. He has lived 
homeless under a bridge. He thinks my wife is a stripper and a 
prostitute and that I am a sexual predator. For an entire year 
he did not believe that we were his parents. Now, you tell me 
that this individual can possibly make responsible decisions 
about his care.
    But when he gets into the hospital, and that is a big if 
because sometimes we don't have the recent history from prior 
hospitalizations to give the new hospital. By the way, he has 
been in 14--for 14 years he has been in eight hospitals in four 
counties and one city dozens of different times. And so you 
have this broken chain of treatment.
    So imagine a medical system where physicians and treatment 
providers can't rely on prior history to treat this person. It 
is beyond comprehension, and the other thing that happens is it 
stifles accountability, and now, when I tell you that people 
hide behind HIPAA, I am a 14-year-educated man that has been in 
every situation possible, and it is only the grace of God and I 
think there is a plan out there for my wife and I to somehow 
make a difference, that we are sitting here and that our son 
hasn't killed himself. He is far more likely to kill himself 
than he is to live the rest of his life with his illness.
    And so what we find is that once he gets in the hospital, 
treatment can be delayed or not done at all, and I want to cite 
this example. Our son escaped from a mental health facility 
that was locked. HIPAA was thrown out the window. The hospital 
was calling us, the police were calling us, they were trying to 
pry into his bank records. Every privacy violation you can 
imagine was enacted to try to do this manhunt for my son. They 
found him 4 days later. They dragged him into a state hospital 
in shackles so we can talk about stigma later. Once he was in 
there he verbally assaulted the Administrative Hearing Judge, 
he was put on suicide watch, he was completely out of it, and 
when the time came for his hearing to see whether he should 
receive treatment, we were precluded from participating because 
of HIPAA, and that panel looked me in the eye afterwards and 
said, we can't do it. Our hands are tied.
    Two days later a patient was--a staff member was killed in 
his wing. We don't even want to know what happened, but this is 
what did happen. He was 1 year, 1 year in that facility. The 
abuse, the things that happened to him in that hospital and 
they never, ever let us in. When he was 18, they couldn't live 
without us. When he became 18, we were the enemy. We might as 
well have been strangers on the street. We have doctors who 
have shared with us behind the scenes some things that they 
knew they were going to get in trouble with. They told us, we 
can lose our jobs, but we have to tell you. We are members of 
community, and people know us, so people took chances, but when 
we got outside of our community, there were no changes being 
taken, and we were left out.
    The other thing that happens is imagine somebody who is 
mentally ill being discharged back into real society. Even 
under the best plans with families being involved, it is a very 
difficult process. But take a look at someone who is not part 
of a discharge plan that includes a support network. Our son 
has been released and sent on buses, and we haven't found him 
for weeks, wondering if he is dead.
    HIPAA empowers homelessness. Our son has been gone. No 
money, no clothes that are adequate, nothing. Gone. We look 
around in shelters. Gone. We say why didn't you tell us? We 
can't. HIPAA precludes that. And we say, we thought--and then 
this whole idea, this notion that they have to tell us if it is 
a threat to us. Well, they are not supposed to let him out if 
they are a threat. So they have already decided he is not a 
threat, so they won't let us do it.
    So we search for him, the shelters can't tell that they are 
there, and then the next thing that happens is this person who 
has been released, you don't want this person released like 
this. No support, isolated, in fear, frustrated, angry, and we 
are his first target. Right? We are the first target.
    And so people are being released every day without 
discharge plans involving the family, and they have no way to 
transition back into life, and you don't want that. You don't 
want somebody that has psychosis as a symptom that pops up, and 
by the way, this idea of anticipating and predicting when 
imminent danger is coming, I just fought in the State of 
Maryland for 4 months to try to get that across. Not one person 
on this planet can predict the tipping point of someone with a 
severe mental illness. You can't do it.
    So what you try to do is you rely on who? You rely on the 
people closest to that person, and who is that is the family, 
but the family can't do it. We can't give recent history to the 
next hospital or doctor because we can't get it, so what is 
worse is as each year goes by, we have less ability to help. So 
this idea that we are going to provide information to the 
hospital, it doesn't work, and it is scary.
    So in closing, I would like to say that HIPAA has a lot of 
gaping holes in it. This is the biggest, but if there are ways 
to beat HIPAA, we seek to find it, which is bad. Our son and 
other people's sons and parents deserve the right to be 
collaborative and informed so that they are safe and their 
child is safe.
    Thank you.
    [The prepared statement of Mr. Kelley follows:]

    [GRAPHIC] [TIFF OMITTED] T2190.041
    
    [GRAPHIC] [TIFF OMITTED] T2190.042
    
    [GRAPHIC] [TIFF OMITTED] T2190.043
    
    [GRAPHIC] [TIFF OMITTED] T2190.044
    
    [GRAPHIC] [TIFF OMITTED] T2190.045
    
    [GRAPHIC] [TIFF OMITTED] T2190.046
    
    [GRAPHIC] [TIFF OMITTED] T2190.047
    
    [GRAPHIC] [TIFF OMITTED] T2190.048
    
    [GRAPHIC] [TIFF OMITTED] T2190.049
    
    [GRAPHIC] [TIFF OMITTED] T2190.050
    
    [GRAPHIC] [TIFF OMITTED] T2190.051
    
    Mr. Murphy. Thank you, Mr. Kelley. Ms. Thomas, you are 
recognized for 5 minutes. Thank you.

                    TESTIMONY OF JAN THOMAS

    Ms. Thomas. First of all, I would like to thank Congressman 
Braley for asking me to come to Washington to tell my story, 
and I would like to thank Chairman Murphy and Representative 
DeGette for holding this hearing today on this very important 
subject. My name is Jan Thomas, and the story I have to tell is 
a nightmare that could have prevented. My life has not been the 
same since this tragedy occurred, and it changed the lives of 
my entire family and my community.
    On June 24, 2009, what started out as a normal beautiful 
spring morning ended up being the beginning of a nightmare. 
Shortly before 8:00 am, a 24-year-old former student, Mark 
Becker, walked into our high school weight room, and in front 
of 22 young high school students emptied his gun at close range 
into my husband, Ed. Ed did not survive his injuries, and he 
died on the way to the hospital. He was only 58 years old, and 
he had taught and coached for 36 years.
    In one quick moment, so many lives were impacted forever. 
Our family lost a son, husband, father, grandfather, and 
brother whom we all loved very much. The students in the weight 
room that day, along with our extended community, lost a 
mentor, friend, teacher, and a coach. They lost their sense of 
confidence and security, and the horror of that day will be 
with them forever.
    Innocent youngsters, including our own young grandsons, 
suddenly realized that the world has a dark side. They were 
taught a horrible but truthful lesson that day. Bad things do 
happen to good people for no explainable reason, even when they 
think they are safe.
    Our grandsons were robbed of the deep love of their 
grandpa, and they will miss all of the experiences they could 
have had with him. My sons lost their father, whom they loved 
very much, and I lost my husband and my life partner on that 
day, and we miss him every day.
    But the real tragedy of that day is the fact that it could 
have been prevented. Only 4 days before Ed was murdered, this 
same young man rammed his car into the garage of an 
acquaintance and tried to break his way into the home with a 
baseball bat. When police arrived, he fled in his car, leading 
the law enforcement on a high-speed chase. When the police 
finally apprehended him, he was taken to an area hospital for 
psychological evaluation.
    Less than 24 hours before my husband died, Mark decided he 
didn't want to stay at the hospital, and so not following the 
advice of his doctor, Mark was dismissed.
    No one knew. Law enforcement was not notified, even though 
they had requested that the hospital let them know when he was 
going to be dismissed. The hospital's justification for not 
notifying the law enforcement prior to his release was that 
HIPAA prevented this disclosure. Even his parents did not know 
until Mark himself called them later that evening.
    No one knew that Mark had been released, but Mark's privacy 
had been protected. During the investigation into the murder, 
it was revealed to us that Mark had feelings of animosity and 
resentment toward Ed. We didn't know that. If Mark had come to 
my home that morning and asked where Ed was, I would have 
innocently sent Ed's killer directly to him and Ed to his 
grave, and what a horror to think that I may have had to live 
with that.
    Once again, Mark's privacy was protected. Adults with 
severe mental illnesses are not always able to make good 
choices for themselves concerning their treatment or their 
actions. They may need help of a family member or other 
responsible parties to be sure they receive required treatment. 
They may need outsiders to keep them and others out of harm's 
way, but due to HIPAA, even Mark's parents were unable to get 
requested information or help make decisions for his treatment.
    So I would ask you. Is the privacy of one individual more 
sacred than a life? Is it more important than the welfare of 
our general public? Is it more important than allowing our law 
enforcement to know when a potentially dangerous offender is 
being released back into the very community that they risk 
their own lives every day to protect?
    Ed was an inspiration to so many in our community, and most 
importantly, he was a loving son, father, grandfather, and 
brother. I urge Congress to update this law so we can prevent 
further tragedies like this one.
    Thank you.
    [The prepared statement of Ms. Thomas follows:]

    [GRAPHIC] [TIFF OMITTED] T2190.052
    
    [GRAPHIC] [TIFF OMITTED] T2190.053
    
    Mr. Murphy. Thank you, Ms. Thomas. Ms. McGraw will be 
recognized for 5 minutes.

                   TESTIMONY OF DEVEN MCGRAW

    Ms. McGraw. Thank you very much. I really appreciate this 
opportunity, and I want to thank the Chairman and the 
subcommittee for focusing on these issues which are clearly 
very critical. I direct the Health Privacy Project at an 
organization called the Center for Democracy and Technology, 
which is a non-profit public interest and advocacy organization 
that works on behalf of consumers.
    We like to think of privacy as playing an incredibly 
important role in making sure that people who are suffering 
from stigmatizing conditions like mental illness will actually 
get into treatment. Many people express, one out of six in 
surveys consistently, that if they didn't have some guarantees 
in confidentiality that they would not seek treatment, and that 
is the reason why we have privacy laws. They are not aimed at 
trying to create obstacles for people necessarily but to create 
the kind of treatment environment that people with stigmatizing 
conditions with want to be in.
    Having said that, they are not absolute. They have lots of 
exceptions, and the previous panel talked about them, some of 
the members of this panel have talked about them as well, that 
allow for the notification of persons in the event of a serious 
and imminent threat and also notification of family members 
except in cases where there has been an objection by a patient 
who has the right to object. So in this case it would be either 
an adult or an emancipated minor or in some States that allow 
minors to consent for treatment on their own and to be able to 
control their privacy rights. In that case the minor would hold 
the right. If that objection has not occurred or you are not 
dealing with someone who is incapacitated, HIPAA does provide 
for the ability for providers to share information with family 
members, with close friends, or with people that the patient 
designates.
    Having said that, I think it is abundantly clear from the 
testimony that we have heard today that HIPAA is badly mangled 
in terms of how people interpret it, and using it frequently as 
a shield not to disclose information or because they fear 
liability, which, frankly, is not anywhere in HIPAA, and it 
is--what is incredibly frustrating to me when I hear these 
stories, and I am sure it is frustrating for all of you, too, 
is that HIPAA doesn't say you can't disclose. So for people to 
blame this on HIPAA is just incredibly frustrating because, in 
fact, HIPAA does allow those disclosures in those cases, and 
where the disconnect is happening is just incredibly 
frustrating to me. Again, I am a privacy advocate, but I 
believe in the reasons for these exceptions. We try to take a 
very balanced approach to these issues and understand the 
reason why those exceptions exist, and yet for whatever reason 
the myth that you can't disclose to family members, and, again, 
this is--the disclosure to family members are not bound by the 
potential for a serious and imminent threat.
    It is the case, though, that if an individual objects, 
again, if they have the competency and the power to object, 
then that would be the case where you couldn't disclose. But I 
would say more often than not there is, again, experiences of 
the folks at this table notwithstanding, people actually want 
their family involved in their care. I have had people say to 
me, my mother, my elderly mother, who I am caring for, I would 
like to be able to have her doctor talk to me about her 
treatment and yet that office is telling me that HIPAA will not 
allow it to happen. And that is so untrue and so I am 
incredibly sympathetic to the frustration of people who are 
told that HIPAA requires something that it doesn't, and I am 
trying to figure out what we can do better in terms of 
educating folks about what HIPAA does and what it doesn't do 
because it sounds to me like too many people are hiding behind 
it in circumstances where there are clear exceptions that would 
allow for that information to be shared.
    Some of the testimony of Director Rodriguez in the first 
panel, frankly there was a lot more--I had a lot greater 
understanding of the exception for family members than I did 
before the hearing, and so that suggests to me that this 
guidance, which I think is good, it is not the letter that 
everyone has been talking about because the letter deals with 
serious and imminent threat. This is guidance about what can be 
shared with family members because often patients, in fact, 
want their information to be shared with one or more of their 
family members or a close friend who is helping to care for 
them, and yet it doesn't happen.
    And it could be made more clear, frankly, and we could find 
better ways of disseminating this guidance. I mean, I know 
where it is on the Web site, but there is probably lots of 
folks who can't find it, who aren't aware that it exists, and 
particularly when faced with a person and a healthcare facility 
telling them, which is probably something that they 
unfortunately believe, that HIPAA won't allow that information 
to be shared, when, in fact, it does.
    I am happy to answer any questions, and I appreciate the 
opportunity.
    [The prepared statement of Ms. McGraw follows:]

    [GRAPHIC] [TIFF OMITTED] T2190.054
    
    [GRAPHIC] [TIFF OMITTED] T2190.055
    
    [GRAPHIC] [TIFF OMITTED] T2190.056
    
    [GRAPHIC] [TIFF OMITTED] T2190.057
    
    [GRAPHIC] [TIFF OMITTED] T2190.058
    
    [GRAPHIC] [TIFF OMITTED] T2190.059
    
    [GRAPHIC] [TIFF OMITTED] T2190.060
    
    Mr. Murphy. Thank you very much. We thank all the 
panelists. I want to also say here that our hearts go out to 
the families, Mr. Wolfe, Mr. Kelley, and Ms. Thomas. It is a 
sad tragedy and Mr. Kelley, that you are still dealing with 
here.
    We are going to recognize each person for 5 minutes.
    I just want to make it clear, Ms. Levine, you stated you 
had some opinions in your testimony. You are not a licensed 
provider, am I correct?
    Ms. Levine. No, no. We are----
    Mr. Murphy. And you are not a practicing therapist in this 
field?
    Ms. Levine. Not at all.
    Mr. Murphy. OK. It is just very important for the record 
because on page ten of your written testimony you said that 
doctors don't want to share information, and it is, ``a 
convenient excuse not to talk to families or listen to what 
they know about a patient.'' You went on to say it is, ``easier 
to avoid difficult conversations about prognosis and treatment 
options.''
    Dr. Martini, is that true that doctors don't want to know 
this, they don't want to know this information, they don't want 
to talk to families because it is difficult?
    Dr. Martini. No. I think that the vast majority of 
physicians that I work with are very interested in sharing that 
information and very much want, I think, to involve families in 
care. I mean, I think we know that particularly for psychiatric 
patients that their prognosis is approved, that, one of the 
ways I look at it is I see a patient perhaps at the very most 
an hour a week, and the families are dealing with these 
individuals on an ongoing basis, and I think any recommendation 
that I make as a clinician is much more likely to be successful 
if I am able to get the support of the family.
    Mr. Murphy. Mr. Wolfe, Ms. Thomas, and Mr. Kelley, just 
real briefly, just in a word or two because I don't have a lot 
of time, also from your standpoint because you have also talked 
to providers about these cases, do you think in these cases the 
providers did not want to talk to you, or they did, but they 
felt they could not because of their interpretation of the law?
    Mr. Wolfe?
    Mr. Wolfe. Yes. My family physician told me later that he 
did want to disclose it, but he felt that he was under the 
obligation of the HIPAA rules not to disclose it.
    Mr. Murphy. Mr. Kelley?
    Mr. Kelley. In 14 years I have never encountered a 
situation where a treatment provider did not want to disclose 
it. In fact, they went out on a limb and would secretly tell 
us. No, I have never had that.
    Mr. Murphy. Ms. Thomas?
    Ms. Thomas. I can only speak for what law enforcement told 
me and also what Mark's parents have told me about, and they 
all had difficulty getting information.
    Mr. Murphy. Thank you. Mr. Wolfe, Mr. Kelley, you heard 
from Mr. Rodriguez from the Office for Civil Rights that the 
law, it sounds like he is saying that the law is adequate, and 
the problem is that providers aren't really aware of the law 
and are unjustifiably worried about lawsuits, perhaps even 
hospital administrators who pressure staff not to disclose 
information or they will be fired.
    Do you think that is true that it is adequate, both the way 
the law is worded and in terms of the way information gets out 
to providers?
    Mr. Wolfe?
    Mr. Wolfe. I don't think it is adequate as far as getting 
out to the providers because both in my son's case with the 
rehab situation, as well as my family care physician, both of 
them after Justin deceased, I confronted them, and they both 
told me that they definitely would have said something with 
regard to informing me. However, again, with Justin signing the 
HIPAA disclosure, they were not permitted to. So I do feel that 
they did have an obligation. They knew that it was a life-
threatening situation with the use of heroin, but they were 
obliged to follow the HIPAA regulations.
    Mr. Murphy. Thank you. Mr. Kelley?
    Mr. Kelley. In all due respect I fear there is a 
significant detachment from reality here. Not with you, sir, 
but with Mr. Rodriguez. It is underlined, unless the patient 
objects, and someone that is severely mentally ill universally 
wants to object. They don't believe they are ill.
    So that gets thrown out the window, and the fact is that we 
need to have exceptions for the severely mentally ill. It is 
just plain and simple.
    Mr. Murphy. Ms. Thomas?
    Ms. Thomas. I can speak on behalf of the fact that I am a 
volunteer EMT for our community, and the threat of lawsuit, it 
prevents us even from feeling like we are able to tell direct 
family members conditions of patients that we transport. So 
either it is misunderstanding but that is what is emphasized to 
us in our training.
    Mr. Murphy. Thank you. Ms. McGraw, in your written 
statement you said that 17 percent, or about 38 million, say 
they would withhold information from healthcare providers due 
to worries about how medical information may be disclosed. You 
were citing a study.
    Ms. McGraw. Yes.
    Mr. Murphy. My understanding is that study was on general 
health issues, not mental health or severe mental illness. Am I 
correct?
    Ms. McGraw. No. That is right. In the time that I had to 
prepare for this testimony I looked for some more specific 
statistics on persons being held back from seeking treatment 
for mental health, and I didn't have----
    Mr. Murphy. Sure.
    Ms. McGraw [continuing]. Enough time to find something 
directly on point. I did find something on the National 
Alliance on Mental Illness Web site that talked about how two-
thirds of the people with mental illness do not seek treatment 
for a number of reasons; the lack of knowledge, fear of 
disclosure----
    Mr. Murphy. Yes. I appreciate that, and I hope if you find 
some other studies, could you----
    Ms. McGraw. Yes. I would be happy to keep looking.
    Mr. Murphy. I might also say that----
    Ms. McGraw. I just ran out of time.
    Mr. Murphy [continuing]. We have folks here also saying 
that doctors didn't disclose information, and people are over-
interpreting the law, not disclosing it here, and you are 
saying that perhaps patients are also over-interpreting that it 
would be disclosed.
    Let me ask you this. Could you--something very important. 
You said it is badly mangled. I think those were your words. 
What could be done to clarify the law? Do we need legislative 
language, do we need to cite case law, do we need some 
clarification from the Office for Civil Rights, more public 
education? What do we need here?
    Ms. McGraw. The badly mangled part is--was the reference to 
the fact that we had all this testimony about what is really in 
HIPAA and yet people are being told, in fact, that HIPAA is 
something that it is not and with significant consequences.
    You know, more guidance and better ways of disseminating it 
so it is not, you don't have to look really hard for it on a 
Web site absolutely is the first step that we should be 
pursuing here, and ideally that could be done in conjunction 
with the professional societies who have more effective 
mechanisms for doing outreach to their members. You know, 
having read this guidance, I am like, well, it is clear, but it 
could be made more clear, more examples. In this circumstance 
you can do X. In this circumstance, you can do Y.
    Mr. Murphy. Thank you. We will look forward to getting your 
specific recommendations.
    Mr. Braley, 5 minutes.
    Mr. Braley. Thank you, and I should also note, Mr. 
Chairman, that Ed Thomas's sister, Connie Flaharty, is also in 
the audience today. This has impacted her as well, and Jan, I 
think some of the things that your testimony brought out is 
there is this misperception that the issues we have been 
talking about today are unique to large urban areas with a 
higher concentration of people who are seeking treatments for 
severe mental illness. Parkersburg is a town of 2,000 people. 
Five years ago this May it was nearly destroyed by an F5 
tornado, and your husband, Ed, was one of those people in the 
town who rallied people to come back, put the community back 
together, and one of the other things that I think is so 
important about your story is that Mark Becker is someone you 
and Ed knew very well.
    Ms. Thomas. Exactly. Yes. He was a member of our community. 
We have known him his entire life and his parents, and I know 
their frustration in getting him treatment, but there again, I 
agree with what they are saying. When it comes to severely 
mentally-ill people, you can't classify them with someone that 
has cancer or hepatitis or those kinds of things because their 
thinking is just not rational, and I think there maybe needs to 
be some exceptions to those rules there.
    Mr. Braley. Well, and one of the other things that we know 
is that from the stories that have come out, you and Ed went to 
the same church as Mark Becker's parents. So it wasn't like 
this was a stranger in your family, and I know that the Becker 
family has expressed some of the exact same frustrations as 
parents that we have heard from the other panelists in trying 
to get Mark the help he needed so that he could put his life 
back together, and I think that is one of the most disturbing 
things about this topic is these are stories we hear over and 
over and over again, and it points to a breakdown in our 
ability to get people who need it the services that they need 
in communities all over this country.
    But one of the things that I am really interested in is how 
this particular tragedy in your life has changed how people in 
your community think about the problems we have been talking 
about.
    Ms. Thomas. Well, it is hard to speak for other people, but 
I do think there needs to be more awareness of mental health. I 
think this needs to be expanded on quite a bit. I don't think 
there is enough resources out there for people. I think the 
fact that no one knew that Mark was released and a threat was 
very frustrating to people. I mean, there were a lot of victims 
involved. It wasn't just our family. Those young kids were 14 
and 15 years old that witnessed their coach getting shot down 
at close range in cold blood, and it all could have been 
prevented, and I think that is a big frustration for a lot of 
people. They are just--he was not able to get out of harm's 
way, and he was loose on the streets just because he wanted to 
be.
    Mr. Braley. Well, I think one of the other things this 
points to is I lived with somebody with a severe mental illness 
40 years ago, and I remember the stigma attached to mental 
illness then, and I think we would like to think that we have 
come a long ways as a society in dealing with mental illness--
--
    Ms. Thomas. Yes.
    Mr. Braley [continuing]. As something that is just as real 
and impacts people's lives as much as other diseases, but I 
think the reality is that there is still a lot of stigma 
attached to it. We like to avoid having these conversations 
unless it is impacting us personally. So I want to thank all 
the panelists for having the courage to come share your 
stories. I know that it has been an incredible challenge for 
all of you.
    And one of the things that I talked about earlier is this 
challenge that family members have with adult children of being 
able to have a role in making decisions about their care when 
there are sometimes obstacles, and Dr. Martini, you talked 
about this a little bit, and one of the questions I had raised 
earlier was whether this risk to self or others standard is 
still a viable way of getting patients the help they need for a 
truly effective treatment. You gave examples of both sides of 
the story; one where a family's intervention was 
counterproductive, one where the need for family intervention 
was not provided that could have been in the best interest of 
the patient.
    So how do we resolve this?
    Dr. Martini. Well, I think, Congressman, what I would like 
to do is think about what you last referred to, what is in the 
best interest of the patient, what do we think is going to help 
the patient most, help them in their recovery. I understand 
that there are issues around the release of information and 
confidentiality, and I understand that patients are sensitive 
about that, but what we are talking about is not a release of 
information generally out to the community. What we are talking 
about is thinking about particular cases, looking at those 
cases on a more individual basis, and deciding if this patient 
is going to do well, what is going to be necessary, what kind 
of information needs to be shared, should that information be 
shared with family members, are they an asset in this 
particular case, and can they help out this individual? Would 
it be a good idea to share the information with the primary 
care physician in their community who quite often coordinates 
care in a variety of ways. That is also an asset that quite 
often is not part of the process in some ways because the 
patients are reluctant to have any local connection know much 
about what is going on with them.
    Mr. Braley. Thank you.
    Dr. Martini. So it is what is in the interest of the 
patient.
    Mr. Murphy. Thank you. Mr. Braley, that article you 
referenced before from Sports Illustrated, would you submit 
that for the binder so it is in the record as well?
    Mr. Braley. I would be happy to.
    Mr. Murphy. That has got to be tragic for all the reasons 
someone would be on the cover of Sports Illustrated, that has 
got to be the saddest. It is. Thank you.
    Now recognize for 5 minutes the gentleman from Virginia, 
Mr. Griffith.
    Mr. Griffith. Mr. Chairman, if I could pass at this time, I 
would appreciate that.
    Mr. Murphy. We will do that. We will go to Mr. Johnson for 
5 minutes.
    Mr. Johnson. Thank you, Mr. Chairman. First of all, panel 
members, I would like to reiterate thank you so much for being 
with us today and for your testimony. I know these are very 
tough testimonies to give, and our hearts go out to you.
    Ms. Levine, you suggest that healthcare workers sometimes 
use HIPAA as an excuse not to share information and not simply 
because they are afraid of fines or sensors. Why else would 
someone withhold information from inquiring family members?
    Ms. Levine. Well, because the role of a family member in 
the care of someone who is, as I said, my, most of my 
experience is with older adults, although I personally was the 
family caregiver for my late husband for 17 years. He had a 
traumatic brain injury and was quadriplegic. So I have my own 
experiences with this system.
    But family members ask hard questions. They want to know a 
lot of information about why did this happen, what can I 
expect, why are you giving this medication when it is on the 
list that says this is contraindicated. I can't tell you, and 
this is not to disparage the nursing profession because they 
are fabulous, but I have had so many nurses say to me, are you 
trying to tell me how to do my job? OK. Yes. I think I am 
because my husband should not have this medication and that 
medication together.
    So there is a kind of--I can't tell you how many 
physicians, nurses have said to me, family members, they are 
pests, they are nuisances, and they are. I mean, I am not 
denying that because they ask the hard questions. The patient 
in the bed is in pain or is sedated, not going to be a trouble.
    Mr. Johnson. OK.
    Ms. Levine. So it is, I think it is a truth universally 
acknowledged that family members are important on the day of 
discharge, take--get them home but not necessarily in the 
course of a hospitalization.
    But I really think that the HIPAA scare, and I am now 
concerned that there is now going to be a high tech scare 
because I am already getting emails from vendors saying, we are 
going to protect you from these horrible audits that are going 
to happen, and if you only you hire us, you know, you will be 
safe.
    Mr. Johnson. Oh, yes. Every time there is a new government 
regulation an industry crops up----
    Ms. Levine. Yes.
    Mr. Johnson [continuing]. Around, providing services.
    Ms. Levine. And, so, I mean, it is not one thing. It that 
things support each other----
    Mr. Johnson. OK.
    Ms. Levine [continuing]. Is my feeling.
    Mr. Johnson. Let me quickly go to several other questions.
    One of your recommendations has been for OCR to reinforce 
to healthcare providers the provision in HIPAA that permits 
disclosure of relevant information, protected health 
information to family caregivers or others who are going to be 
responsible for providing, managing, or paying for a patient's 
care. How do you suggest OCR go about doing this?
    Ms. Levine. Well, I think throughout--and I agree that the 
Web site is one way but not the best way. I think that there 
can be involving the medical professions, involving the people, 
the risk managers who are doing a lot of the training, 
involving the leaders and saying, this is not good patient 
care. We are concerned about hospital readmissions. One of the 
reasons people come back to the hospital in 30 days and cost 
Medicare tons of money is that the family members who are 
responsible for that care don't know what to do.
    Mr. Johnson. OK.
    Ms. Levine. So they bring them back.
    Mr. Johnson. Do you have recommendations for CMS as well?
    Ms. Levine. Yes. CMS should definitely encourage as part of 
the conditions of participation in Medicare and Medicaid to 
make sure that the training that they are responsible, 
accountable for training the hospitals and nursing homes to 
train their staff in a balanced way, and one more thing which I 
didn't get a chance to say.
    Mr. Johnson. Quickly. I am running out of time but go 
ahead.
    Ms. Levine. Just quickly. When we encounter through our 
contacts with providers, patients who object to having a family 
member involved, it has nothing to do with privacy. It has to 
do with I don't want my--I don't want to worry my daughter, I 
don't want her to----
    Mr. Johnson. OK.
    Ms. Levine [continuing]. Have any responsibilities. It is 
not the privacy.
    Mr. Johnson. Got you. OK. Mr. Kelley, you have observed 
that a clear culture of fear pervaded one of the facilities 
your son was admitted to. How does this culture of fear impact 
decision making by those healthcare workers and facilities 
tasked with taking care of your son?
    Mr. Kelley. And it is more than one hospital, sir, but 
essentially we are not in a position to prevent horrific things 
from happening, and we have had some candid discussions with 
staff and doctors in multiple hospitals, where they all 
acknowledge that, they use the word, our hands are tied, due to 
the HIPAA privacy rules. And so we try to go further and 
emphasize the inability of the patient to take care of 
themselves and make good decisions, and it doesn't phase them.
    So what happens is the patient gets mistreated actually, 
and so our son has come home and been on the wrong medication 
and has been in a horrible condition. So it is pervasive. It is 
not just isolated in one situation.
    Mr. Johnson. Thank you. Mr. Chairman, I yield back.
    Mr. Murphy. Thank you. The gentleman's time has expired.
    Ms. DeGette for 5 minutes.
    Ms. DeGette. Thank you very much, Mr. Chairman, and I would 
like the panel to know that I have read all of your testimony 
even though I wasn't here to hear you say it, and for those of 
you have lost loved ones, my deepest condolences. I know, as I 
said in my opening statement, I know how difficult it is to 
have a child with a severe illness. My child has a physical 
illness, not a mental illness, and she is now a freshman at 
college. So I know what you have been dealing with in terms 
of--and Dr. Martini, I know what you were talking about in your 
testimony, too, of the parents paying the college, you know, 
the college tuition, parents obviously love the child and are 
deeply concerned, and yet the child is over 18, and they are 
wanting to become independent, and they do have privacy issues. 
It is a really hard balance especially when you are dealing 
with some of these mental illnesses which as we learned in our 
previous briefings in this panel from professionals, bipolar 
disease manifests, which is at the root of some of the 
violence, most notably suicides, that evidences itself in young 
men between the ages of 18 and 25 and in young women at a 
slightly older age. But this is right at the age where they are 
becoming independent from their families, and most of the time 
they are over 18.
    So it is a hard balance because on the one hand it is like 
Ms. McGraw was talking about, you want these young people to 
not feel the stigma so that they will get medical treatment and 
on the other hand as parents we want to know if they are at 
risk to themselves or to others, and so it is a balance.
    Dr. Martini, something you said just a moment ago really 
struck me, which is, you know, in trying to grapple with this 
issue you said that we need to look at the individual. The 
doctor, we need to rely on the doctors to look at the 
individual cases and to see if this is a situation where having 
parental involvement or involvement of another responsible 
adult would be appropriate to let them know. And I guess I 
agree with that, but I guess I also in listening to the 
testimony of the last panel would--that is exactly what they 
were saying. What they were saying is in their interpretation 
of HIPAA that is exactly what medical providers are allowed to 
do.
    And so I think what we need to do is we need to--providers 
need to understand what their abilities are under HIPAA. 
Wouldn't you agree with that?
    Dr. Martini. I mean, I think that that is a very important 
part. I think educating providers about HIPAA also in a way 
that makes it seem like this is more of a collaboration that--
--
    Ms. DeGette. Right.
    Dr. Martini [continuing]. There is information to be 
gained. I mean, for example, the State of Tennessee has created 
a review panel of physicians that can look at cases and can 
override aspects of HIPAA if that panel, and it is an objective 
panel----
    Ms. DeGette. Right.
    Dr. Martini [continuing]. Decides that this particular 
situation is worthy of that, and I think those kinds of 
initiatives where HIPAA is seen as not simply a government 
regulation----
    Ms. DeGette. Mandate. Yes.
    Dr. Martini [continuing]. But as a process, as something 
that they can participate in, I think the outcome would be 
better.
    Ms. DeGette. I agree with that, and if we still have our 
HHS witnesses here, yes, we do, some of them, is I think we 
should also have our federal agencies work with the colleges 
because a lot of these problems seem to come with the colleges 
trying to balance the important privacy protections for their 
students and also letting parents know. And, again, I think 
they would have some leeway, but we would have to work with 
them to let them know that.
    Dr. Martini. I think it is a very good point.
    Ms. DeGette. OK.
    Dr. Martini. I think there would also need to be some help 
for them because coordinating mental healthcare for students 
some thousands of miles away would be a challenge.
    Ms. DeGette. And this goes to my--the last thing I want to 
talk about because it is not just the HIPAA issues. It is also 
access to treatment, and I think some of you have probably seen 
this in your communities. I had--I was actually at the eye 
doctor, and the assistant came in, and she said she had a 19-
year-old son diagnosed with bipolar, and he had become violent. 
He was--he actually put himself into a 72-hour hold and then he 
was released, and he actually, you know, involved his parents, 
and they were involved with it. They couldn't find any mental 
health treatment for this kid in Denver, Colorado, and this is 
another issue as well is, you know, once you diagnosis this, 
you have got to be able to find treatment. I think, Doctor, you 
probably agree with that.
    Dr. Martini. Absolutely. I think work force is a big issue, 
certainly in pediatric mental health services----
    Ms. DeGette. Yes.
    Dr. Martini [continuing]. And also I think, I kind of 
alluded to this a little bit, we also need to work on access 
through primary care. I mean, the thing to remember is that a 
majority of the mental health problems are actually treated by 
local physicians in the community, and we need to work with 
them, we need to help them, we need to educate them so that 
access begins locally.
    Ms. DeGette. Thank you. Thank you, Mr. Chairman.
    Mr. Murphy. Thank you. I now recognize the gentleman from 
Virginia, Mr. Griffith, for 5 minutes.
    Mr. Griffith. Thank you, Mr. Chairman. I appreciate your 
patience.
    Let me follow up on that. I think, Dr. Martini, you were 
talking about local health professionals being involved and 
trying to make sure people get treatment. Is it your opinion or 
what are your thoughts, can HIPAA also stand in the way of 
proper communications between, for example, the treating mental 
health professional and a patient's general care physician?
    Dr. Martini. I think that there have been cases that I have 
worked on where the family, the patient, does not want the 
local physician to know about the extent of the psychiatric 
problems in part because the local physician is in the 
community, knows a great many people. I think that a good bit 
of that anxiety is misplaced on the part of the patient, but I 
can understand it. I also think that what we need to do is we 
need to work with these local clinicians and physicians to 
involve them more in mental healthcare to educate them to make 
them part of the mental health system so that families 
recognize that the help that they provide is going to be in the 
patient's and the family's best interest.
    Mr. Griffith. Because one of my concerns that we heard from 
a previous hearing was it takes--or informal hearing but it 
took 18 months for the average person with a mental health 
problem to, you know, get to see a mental health professional, 
and that is of concern and something that we need to address, 
but it would seem to me that your primary care physician might 
be in a position to shorten that time period just by making the 
referrals or by saying this is not such a big deal, and when it 
is a trusted family physician, a lot of times they can be 
helpful in that regard.
    Also in following up, if the professional is not in the 
immediate community, I represent a rural area, so the mental 
health professional may be, you know, the next community over, 
30, 40, 50, 60 miles, maybe more, and if they can then 
communicate with the local healthcare provider, it does create 
some benefits there.
    From the perspective of the patient, why do you think such 
communication, free communication between the healthcare 
providers is important?
    Dr. Martini. I think that on the part of the patient what 
it will allow them to do as you were pointing out is receive 
services, I think, more efficiently. I think that the local 
practitioners understand the community, understand what is 
available in the community, what is available not simply from 
the standpoint of medical services and mental health services 
but also within the community, within schools. They are 
familiar with that. I think that our--what we need to do as 
mental health professionals is we need to work with them to 
teach them what they can do, to get them comfortable with what 
they can do in their practices, and also to teach them when 
they can, when they should refer to us, and then as part of 
that we need to be available. We need to make ourselves 
available, and that is a big question. We do need to increase 
the size of our workforce but also we need to do this in a much 
more efficient and effective way.
    Mr. Griffith. Thank you very much.
    Ms. McGraw, I noted in your testimony that the fear of 
liability for violating HIPAA's provisions coupled with 
misunderstanding of its provisions can be a recipe for not 
sharing.
    Ms. McGraw. Yes.
    Mr. Griffith. And I am just wondering if you are familiar 
with and I hate to ask Ms. Thomas, but I would ask, are you 
familiar with suits that go the other way, where permission 
could have been granted. I mean, in Ms. Thomas's case, you 
know, the police asked to be notified, he clearly--the police 
had made a determination he was dangerous to the community, 
they didn't want him out of on the streets, the hospital then 
used HIPAA as a shield to say, oh, well, we couldn't tell the 
police anything.
    So I am just wondering if you, Ms. McGraw, have heard of 
any suits, and Ms. Thomas, did you all even consider suing them 
for letting this dangerous person back out on the streets when 
HIPAA would have allowed it?
    Ms. McGraw. So I can tell you that HIPAA does not actually 
have any provisions that enable anyone to sue on enforcement of 
it. So either a patient in terms of privacy rights or someone 
else in terms of sort of over-interpretation. Keep in mind also 
that HIPAA's allowance of disclosures for these reasons that we 
have talked about is permissive. It still relies on the 
judgment of healthcare providers to make the judgment call 
about what is in the best interest of the patient.
    Having said that, we need to keep in mind that HIPAA's the 
floor and that there are State laws that may provide greater 
protections, and they may medical privacy statutes that could 
be used for--to impose liability in those circumstances.
    But I certainly have never heard of anybody being sued for 
not releasing information except in the case of information 
that a patient asks for that is about them, because you are 
required under HIPAA to disclose that information. You can be 
held accountable under HIPAA for not doing so.
    Mr. Griffith. I guess my concern that, and I was a 
practicing attorney for a lot of years, but my concern is that 
is one of the ways people like to hate lawyers, and I 
understand that, but that is one of the ways you sometimes get 
rectification in some of these cases, not that the money is 
important. It can't bring anybody back, but it may keep 
somebody from making that mistake again. I mean, here we had an 
individual in your case, Ms. Thomas, who the police bring in, 
he has just run his car into the back of a garage, he is 
clearly either a danger to himself or to others. They bring him 
in, they want psychological evaluation because he is a threat 
to somebody, and the hospital just lets him walk out even 
though the police ask for notification. I can't think of 
anything else that would--and to me that is the classic 
definition of negligence, and I am very sorry. If you want to 
answer you can but----
    Ms. Thomas. No. It is fine. It was considered as far as 
looking into a lawsuit, however, we were unable to get Mark's 
records due to HIPAA, and we just decided that it probably 
wouldn't be--it really wasn't going to benefit anybody at that 
point in time to proceed with a lawsuit.
    Mr. Griffith. And I respect that decision.
    Mr. Murphy. The gentleman's time has expired.
    Mr. Griffith. Thank you. I appreciate it, Mr. Chairman, and 
I yield back.
    Mr. Murphy. Recognize Ms. Schakowsky for 5 minutes.
    Ms. Schakowsky. Thank you, Mr. Chairman.
    First of all, I just want to say that I hope in future 
hearings and other events that we will include testimony and 
participation from the patient community, and I know that there 
is some--I know there is a discussion right now----
    Mr. Murphy. Excuse me.
    Ms. Schakowsky [continuing]. About including testimony----
    Mr. Murphy. We cannot--we are not permitted to have any 
outbursts, and I would ask that members not say things that 
might also provoke some outburst. So I ask the folks be--just 
continue on. Go ahead, Ms. Schakowsky.
    Ms. Schakowsky. OK, and I know there is some discussion 
about including written testimony, highly footnoted, into the 
record, and I would certainly recommend that that be done 
without much ado.
    I wanted to--and let me thank especially the family members 
who came here with your stories. I know it has got to be very, 
very hard to do, and it is much appreciated.
    So I want to understand the examples that, a couple of 
examples that you gave. You had a patient, a former patient 
with a mild form of autism, and eventually his parents went to 
court against his wishes because they said their son could not 
care for himself and thus remained dependent, and you conclude, 
``Unfortunately, the subsequent ruling in their favor was 
counter to our goals of psychiatric treatment and derailed his 
progress in therapy.''
    So are you saying that that was a bad decision that the son 
should have been able to do what he wanted to do?
    Dr. Martini. No. What I was saying was that because the son 
would not allow his parents to be involved in his affairs, nor 
would he let them be involved in therapy, so I couldn't 
incorporate them into any of the programming that I was trying 
to organize, any of the treatment that I was trying to 
organize, couldn't involve them in the medications that he was 
prescribed, and they had serious concerns about how he was 
going to function. Because we couldn't negotiate that, because 
he continued to refuse to allow them to participate, this was 
the only recourse that they had, it went counter to our therapy 
because the purpose of the therapy for me was to make him more 
functional, that my goal was----
    Ms. Schakowsky. I understand that, but what would--at the 
point that you are saying if they had been involved earlier and 
I understand that, but at the point of someone making a 
decision, an adult making a decision about what they want to 
do, is there--I am trying to understand what a better outcome 
might have been and could it have been done without going--
having to go to court.
    Dr. Martini. I think that is one of the reasons I put it in 
there is because I was searching for another way to have a 
better outcome without having to go to court. If there was a 
mechanism, for example, similar to the thing I mentioned in 
Tennessee where there was an opportunity to appeal or to 
present the case in front of a review board involved in HIPAA 
to say this is what is going on in this case, I think it is in 
this individual's best interest to have the parents involved, 
to have them actively participate because I think it is more 
likely that this individual is going to be successful. His 
treatment is going to be successful, and his life, I think, is 
going to be less traumatized. If you have an opportunity to do 
that and there is a means to modify what is happening with the 
HIPAA regulations in these particular cases, I think that it 
would be an advantage not just for the family but also for the 
patient.
    Ms. Schakowsky. So you asked the question, if there is a 
bias in these situations, should it be towards parental 
involvement rather than away from it. What do you conclude?
    Dr. Martini. Pardon me?
    Ms. Schakowsky. What do you conclude? If there is a bias in 
these situations, should it be toward parental involvement 
rather than away from it?
    Dr. Martini. I think that if there is a bias in the 
situation, you know, as a child and adolescent psychiatrist, my 
bias has been to involve families. We involve families as often 
as possible in treatments, and I think that for a variety of 
reasons, and I think if there is going to be a bias in that 
situation, my recommendation would be that it be toward family 
involvement, particularly if there are no specific reasons 
within that family, if there are no contraindications within 
the family, nothing that would adversely affect the patient.
    Ms. Schakowsky. Just wonder, I mean, and I am not weighing 
in on either side, but I think there are people in the 
independent living community that would feel that a young adult 
with autism, that there may be some better ways for that 
individual to live in the community with support, help, et 
cetera, rather than as you used the word, dependent, at home.
    Do you see that as part of the negotiation that might 
involve everyone?
    Dr. Martini. Absolutely. I mean, I think in this particular 
case the goal for this patient was greater independence. What 
the hope was in treatment was that he would be able to manage 
his affairs, that the level of anxiety that he felt in new 
situations would go down, that we would increase the 
capabilities that he had to manage his medications. The sense 
was that having his parents involved, I think, would have 
expedited that process.
    Ms. Schakowsky. Thank you. I yield back.
    Mr. Murphy. Thank you. Recognize Ms. Ellmers for 5 minutes.
    Mrs. Ellmers. Thank you, Mr. Chairman, and I would also 
like to say to the panel, thank you so much--and I am going to 
get emotional--for coming and sharing your stories because this 
is the only way we are going to change anything in mental 
health. I know how difficult it is for you to come forward, but 
I can just say how much we appreciate your input so that we can 
make the right decisions moving forward.
    With that I would like to start, Ms. McGraw, thank you for 
your comments to my colleague. You know, one of the areas, as a 
nurse, and Ms. Levine, I completely I associate myself with 
your statements because I think sometimes it is easier to just 
give a blanket, hey, you don't know what you are talking about. 
You are the family member. Anyone who knows better for your 
family is you. So, unfortunately, that is one of the downfalls 
of nursing is sometimes we share our opinions a little too 
openly.
    But I am concerned about the misconception of lawsuits 
because as we know, there are so many frivolous malpractice 
lawsuits out there. This is one of those gray areas where 
healthcare professionals do not feel that they are protected. 
Certainly HIPAA violations can be weighed against them, but at 
the same time as far as malpractice, that is not necessarily an 
avenue that will be taken. Am I correct with your testimony?
    Ms. McGraw. Yes. Well, certainly there is nothing in HIPAA 
that would enable someone to be sued. Again, to the extent that 
you have seen sort of any lawsuits in this space around privacy 
violations, they are filed under state law provisions.
    Mrs. Ellmers. OK.
    Ms. McGraw. And I don't do malpractice work, but, again, if 
you are being--if you are facing a malpractice lawsuit, that is 
a State law action.
    Mrs. Ellmers. Perfect. Thank you, and Mr. Wolfe, I would 
like to ask you a few questions.
    Mr. Wolfe. Thank you.
    Mrs. Ellmers. With your situation especially, and as 
sensitive as it is, again I thank you for being brave and 
sharing that with us. I read over your testimony to find that 
you were in a situation where you knew what was happening to 
your son, you knew that there was a drug addiction, and because 
of that behavior on his part with the manipulation that they do 
so well----
    Mr. Wolfe. Right.
    Mrs. Ellmers [continuing]. He was able to manipulate and 
then kind of get his way.
    Mr. Wolfe. Yes.
    Mrs. Ellmers. And then you were able to get him into a 
treatment facility but then you were told that they could not 
share information with you because of HIPAA. Correct?
    Mr. Wolfe. Exactly, and the manipulation, the lying that 
goes along with addiction from what I have learned from my son 
and from others since this has happened was just to give you 
one quick example, I wanted him to go into an inpatient 
treatment program immediately, and he said to me, Dad, I don't 
want to go into an inpatient treatment because I don't want to 
start using heroin or crack cocaine. And I as a parent had to 
make the decision what to do----
    Mrs. Ellmers. Yes.
    Mr. Wolfe [continuing]. And I did my research and I did 
hear that people do smuggle in----
    Mrs. Ellmers. Yes.
    Mr. Wolfe [continuing]. Heroin and crack cocaine, and there 
are a lot of other users than Percocet using, which is what he 
had indicated that he was doing to the family----
    Mrs. Ellmers. Yes.
    Mr. Wolfe [continuing]. Not letting us know that he was 
doing heroin. So, therefore, the lies and manipulation 
unfortunately, we sent him to an outpatient which he said he 
would agree to go to, and when I tried to confront the 
outpatient counselor for the first couple of weeks I was denied 
any access to any records or be told why he was there.
    Mrs. Ellmers. You know that unfortunately is a story that 
we continue to hear, and I do agree with you. I do think that 
there are some changes that need to be made. More 
clarifications, I think, than anything so that both healthcare 
professionals, family members, and patients can all understand 
a little better what can be shared and what cannot. So I thank 
you.
    Mr. Wolfe. Thank you.
    Mrs. Ellmers. Dr. Martini, I have just about 30 seconds 
left, but I do want to say just very recently I was at the 
Partnership for Children in Cumberland County, North Carolina, 
I represent in the second district of North Carolina. We had a 
lengthy discussion about mental illness, especially in relation 
to children. I have a very good friend whose son is autistic 
and now is starting to show signs of depression and some, 
beginning signs of mental illness. They are having an 
incredibly difficult time trying to find the correct physician 
for him because of his autism that had already been diagnosed.
    Quickly, could you just say a few words about that?
    Dr. Martini. I think that the availability of services is a 
critical issue. I think at child and adolescent psychiatry we 
need to expand our workforce not just among psychiatrists but 
with all child and mental health professionals. I think we 
also, as I alluded to before, we need to work with community 
physicians. We need to work with schools. There are ways to 
provide services for children locally that can be efficient and 
effective beyond simply going to a tertiary center.
    Mrs. Ellmers. Thank you so much. I appreciate the Chairman 
giving me a few more seconds. Thank you.
    Mr. Murphy. The gentlelady's time has expired.
    Mr. Scalise is next, but I understand he is going to allow 
Dr. Cassidy to go first.
    Dr. Cassidy, you are recognized for 5 minutes.
    Mr. Cassidy. Thank you, Mr. Chairman, and thank you, Mr. 
Scalise.
    Every one of you, thank you for your note of reality.
    Ms. McGraw, clearly we are all concerned about privacy and 
yet you can respect that there is a certain ambivalence that we 
must have or that is exhibited by this. So thank you all.
    Ms. Levine, the way that you said that the HIPAA laws 
should be written in something that a patient understands, I 
put exclamation mark, exclamation mark, exclamation mark 
because it is written to avoid liability, not to inform people 
of what their rights are.
    Now, thank you, all.
    Dr. Martini, what a great name for a psychiatrist.
    Dr. Martini. I like it.
    Mr. Cassidy. I asked Mr. Rodriguez a question, and you put 
here, if you had a patient who was--if Lithium is still used 
for bipolar, and if the level is declining but the patient is 
still compensated, would you feel that current HIPAA laws would 
allow you to speak to the parent of someone who is emancipated 
by age or by law that, listen, if this Lithium level goes any 
lower, they are going to have a psychotic break. This is not an 
immediate danger, but Mr. Rodriguez seemed to indicate that 
that would permissible. Would you accept that in your practice 
that is what most psychiatrists or whomever are doing?
    Dr. Martini. If the patient explicitly stated that he did 
not want that information shared if the patient was not in 
imminent danger to self or others, I think most psychiatrists 
would believe that they should not share that information.
    Mr. Cassidy. Now, if the patient had a history of being 
non-compliant with Lithium and having bipolar episodes and 
creating some of these terrible heart-rendering stories 
occurring, would that change the calculus, or would it still 
be, no, we cannot do it?
    Dr. Martini. I think that what--when I talk to colleagues 
of mine about that situation, if they are dealing with a 
patient that they know is dangerous, if they are non-compliant 
with their medications, they inform families and significant 
others, and they take the risk that they may be in violation of 
HIPAA because they believe that it is in the best interest of 
the patient.
    Mr. Cassidy. Now, it is interesting because you say they 
take the risk, and yet that is a perception and yet some of 
what we have heard is that that should not be a risk. It should 
be kind of like, wow, don't worry. It is not a risk, but it 
tells me that there is an ambiguity even among people who are 
full-time professionals. Would you accept that?
    Dr. Martini. Well, I think that that is true. I think that 
the problem is that it is that idea of waiting until imminent 
danger. A patient can be non-compliant on medication and for a 
period of time look pretty stable, and you know that 
eventually----
    Mr. Cassidy. Now, not to be rude but we know that there are 
going to be a pattern of episodes, and so we know, man, he is 
off his Lithium. I see his level going down. Boom. It is going 
to happen again. Now, he doesn't pull a gun, he doesn't do 
anything terrible, but he does live under a bridge, he does 
leave his family, he does sell all his possessions and run down 
the street, whatever.
    In that would there be ambiguity among your colleagues 
whether they are at risk?
    Dr. Martini. I think that if when they are seeing the 
patient, if the patient appears stable and is doing well but 
they know they are non-compliant with the medications, 
understanding that mood disorders quite often are episodic, I 
think that there would be some concern if they told the family 
but they understand that in many situations they need to do 
that because the patient has a history.
    Mr. Cassidy. So, again, there is a perception they are 
running a risk?
    Dr. Martini. I think there is a perception that they are 
running a risk.
    Mr. Cassidy. Now, Ms. McGraw, Mr. Kelley used the term, I 
am not quite sure how to pronounce, but I think we are all 
familiar with it if we have a teenager. On the other hand, his 
is far more dramatic than that. A year of no insight. Now, this 
gentleman, his son said that his parents could not know his 
history, and yet he had no insight. We are not quite sure how 
to address that. What would you suggest?
    By the way, I was also struck as smart as you are and you 
are an expert in privacy, you learned something from Mr. 
Rodriguez's testimony. I will tell you, an ER physician seeing 
20 patients a night who is not in your specialty, not hearing 
this testimony, there is no way that ER physician, there is no 
way that she can actually be as facile with this information 
that we are demanding.
    What suggestions would you have as to regards of Mr. 
Kelley's son?
    Ms. McGraw. Well, one of the things that we have had a lot 
of conversation about and when I said that I learned something 
from Director Rodriguez this morning was how the concept of 
incapacity plays in the capability to share information with 
family members, which is not contingent on serious or imminent 
risk but circumstances under which a mental health professional 
can make a judgment about talking to a family member when they 
believe it is in the best interest of the patient, which is in 
circumstances when the patient is not around to object or in 
incapacity. And in looking through the guidance that is right 
in front of me about the ability to talk to family members, the 
issue of this incapacity which is, in fact, in the regulatory 
language, it is not really explored in very much detail.
    So it does leave a lot of uncertainty on the part of 
providers about how they are--you know, how do they comply with 
that and what does that mean, and it certainly would be helpful 
to have the guidance explore that issue in a little more detail 
in my opinion.
    Mr. Cassidy. Thank you very much. I yield back, and thank 
you, again, Mr. Scalise.
    Mr. Murphy. Thank you. Mr. Scalise, you are now recognized 
for 5 minutes.
    Mr. Scalise. Thank you. Thank you, Mr. Chairman, for having 
the hearing, and I especially want to thank those family 
members who have been impacted by mental illness for coming 
here and sharing your stories with us. We had I thought a real 
helpful forum back on March 5 where we had some other family 
members, including Pat Milan, who is from my district, whose 
son, Matthew, took his life, we being treated for mental 
illness. They, you know, they actually thought they were making 
progress. Both Pat and his wife, Debbie, were trying to get 
information from the doctor, from the treatment centers, and 
were not able to get that information, and HIPAA was being 
thrown up as the reason that they couldn't get access. It 
turned out after the fact, unfortunately, after he took his 
life, that in his file he had actually authorized his parents 
to have access to information, and so it was just incredibly 
frustrating, angering, you know, for us hearing this at the 
forum that we had but especially to them as parents who were 
trying to get the right kind of help for their kids, for their 
son, and just couldn't get that access.
    And so when we hear these stories, and I know, Ms. McGraw, 
you talked about it, Ms. Thomas, that people hiding behind 
HIPAA when it turns out that HIPAA really may not be the 
impediment. How do we get some clarity in HIPAA to remove this 
gray area, if it is even in fact gray, that is stopping vital 
information from being shared with family members, you know, 
and even in cases where these patients want their parents to 
have that access, and yet it is being denied.
    If, you know, anybody from Dr. Martini and maybe go across. 
If we can try to figure out what is this disconnect that is 
stopping this information from being shared when the law by 
many people's own interpretation doesn't preclude that 
information from being shared.
    Dr. Martini. I think the thing that is missing in these 
situations is a discussion of the clinical presentation and 
looking at these cases on a much more individual basis and 
providing within the law some flexibility for whether it is 
appeal or whether it is involvement by clinicians so that there 
is an opportunity for a psychiatrist, a psychologist to present 
the case to an objective body to make a request for 
modifications in HIPAA in those particular situations.
    Again, thinking about what is in the patients' best 
interests and to have that objective body rule on that process 
I think somehow making it feel as though this is not simply the 
government telling people what to do, but it is the government 
giving people an opportunity to protect their rights but also 
to ensure the patients get the best care possible.
    Mr. Scalise. Ms. Levine?
    Ms. Levine. I think we need to start with medical 
education, nursing education, and all other kinds of education 
to have objective people presenting the rules of HIPAA, what is 
permissible, so forth, not the risk managers. I am sorry if 
anybody here is a risk manager, but I think this perception of 
the legal liability, yes, anybody can sue anybody for anything, 
but the real risk is in the security of the electronic data, 
and that seems to have been ignored in all of this HIPAA scare. 
The Washington Post did a----
    Mr. Scalise. And I apologize. I have only got a minute 
left, and I want to get to the four remainder----
    Ms. Levine. Yes. So I think we need to do the education in 
an objective way, balanced way, and think about the patients' 
best interests.
    Mr. Scalise. Thanks. Mr. Wolfe.
    Ms. Levine. Definitely include the family.
    Mr. Wolfe. Yes. I just want to say that I feel that the 
parents, it is very important for parents to be apprised of 
what is happening with their children, even when they are 
legally emancipated, and I think that is important to be put 
into because of the Obamacare since we do take care of them 
until the age of 26 under our insurance, I would not have lost 
Justin if I was made aware of what he was going in for. So I 
think the parents have to be made aware. We are the best 
caregivers with regard to our children, and there has to be an 
exception with regard to that.
    Mr. Scalise. Thanks. Mr. Kelley.
    Mr. Kelley. I would like to ask that the committee start 
expanding the definition of a family member beyond a parent 
because there are other members of the families that are in 
these roles, but quite frankly, change is hard, and I want to 
thank Ms. McGraw from the bottom of my heart because it is 
taken so long to hear what she just said. We need to change 
things, and sometimes you can't get change unless you change 
things. There has got to be a carve out for the severely 
mentally ill or this unless the patient objects clause will 
rule the world.
    Mr. Scalise. Thanks. Ms. Thomas.
    Ms. Thomas. I guess I would kind of agree with what he 
said. I think we need to be made more aware of what HIPAA 
actually does prohibit, and I do think there probably should be 
some special clauses there for the mentally ill.
    Mr. Scalise. Thanks. Ms. McGraw finally.
    Ms. McGraw. Yes. Lots more guidance, clear, understandable, 
disseminated to places that people can easily find it, maybe in 
a hotline for questions.
    Mr. Scalise. Thank you, Mr. Chairman. I yield back the 
balance of my time.
    Mr. Murphy. The gentleman's time has expired.
    At this time we have finished the testimony. I understand 
that the Ranking Member has a unanimous consent request. I do 
want to say this.
    This committee has a practice of only accepting sworn 
testimony. We are going to be asked to accept a letter signed 
by a number of organizations which states in its first 
paragraph that they are submitting a statement for the record 
in advance of the hearing. I want to say that we only became 
aware of this at 7:15 this morning, and we have not had time to 
fully review this statement. In this case it is not a letter 
but as I said before, a ``statement for the record,'' which 
does not follow the tradition of this committee for sworn 
testimony.
    Moreover, this is a point of personal privilege for the 
Chairman. One of the groups who have signed this letter for the 
record has repeatedly circulated false statements about the 
Chairman and Ranking Member and have repeatedly and purposely 
misrepresented the serious and important work we are doing here 
on behalf of patients, families, healthcare providers, and the 
public. They have repeatedly and deliberately misrepresented 
the committee work with these false statements.
    Thus, in this case submitting a statement for the record 
without it being sworn testimony is of concern to the Chair, 
and I yield to the Ranking Member for her statement.
    Ms. DeGette. Thank you. Well, Mr. Chairman, I would ask 
unanimous consent to place a letter dated April 25, 2013, about 
the position of these organizations regarding HIPAA. It is 
signed by the American Civil Liberties Union, the Autistic 
Self-Advocacy Network, and the Baseline Center for Mental 
Health Law, and I would ask unanimous consent to put this in 
the record as the opinion of these organizations.
    As we have discussed before, I have been on this 
subcommittee now for 16 years, Mr. Chairman, and it has always 
been the practice of the committee to take testimony under 
oath, and you are absolutely correct that this letter obviously 
is not under oath. It has also been the practice of this 
committee, though, to get extensive information from folks who 
might have expertise or opinions or otherwise, and I have seen 
this happen numerous times from both sides of the aisle. Simply 
accepting a document into the record does not necessarily imply 
agreement with the position stated in that document by either 
the Chair, the Ranking Member, or any other member but rather 
it helps to give a more full picture of what people think.
    But I agree with you. I do not consider this April 25 
letter to be testimony or to substitute for testimony. I 
believe that it is a statement of that group, and we have done 
that. I have got many examples here I could give, but in the 
interest of time I won't. I simply ask for the Chair's comity 
in putting this in and look forward to working with you so that 
we can clarify documents that will be put in in the future.
    I would also note we also did put an article from Sports 
Illustrated in the record today. So it seems to me this letter 
would be appropriate.
    Mr. Murphy. I thank the Ranking Member, and out of my 
respect for the Ranking Member and understanding some of the 
unique circumstances in this case, for the unanimous consent we 
will accept this into the record at this time.
    I do want to thank the panelists today in continuing our 
series to deal with this critically important issue for the 
American people. Not since John F. Kennedy was President I 
think have we had such a focus on the issues of mental health 
and mental illness in this country.
    Your statements today, the passionate statements from the 
family members, and, again, our sympathies and our prayers go 
out to you, the expertise, Dr. Martini, Ms. Levine, and Ms. 
McGraw, and those in our first panel, I ask that you stay in 
contact with us. We have a great deal of respect for what you 
have given to us today and look forward to working with you.
    I would like to also add this. I am very proud of the 
committee members on both sides of the aisle. I think that the 
members here have shown an absolute dedication to working on 
this. The statement we had earlier today, there is something 
like 38,000 suicides, 700,000 emergency room admissions for 
people who have attempted harm to themselves, and all the 
issues involved. This committee is focused more than any other 
subcommittee I think in Congress in our memory and I deeply 
thank the Ranking Member for her compassion and her passion in 
this. I also thank Mr. Braley for his bringing Ms. Thomas in 
today.
    Again, thank you all very much. I would like to say in 
conclusion that I remind members they have 10 business days to 
submit questions to the record. I ask the witnesses to all 
agree to respond promptly to any questions we forward to them.
    With that this committee is adjourned.
    [Whereupon, at 11:35 a.m., the subcommittee was adjourned.]
    [Material submitted for inclusion in the record follows:]

                 Prepared statement of Hon. Tim Murphy

    Last month, I convened a bipartisan forum to address a 
difficult, painful, and much-ignored topic: severe mental 
illness and violence. At our forum, Pat Milam told us about his 
son, Matthew, who had paranoid schizophrenia. For years, Matt 
suffered before taking his own life at just 22 years old.
    During that forum, Mr. Milam explained that his son's 
doctors were unwilling to share concerns about Matt's high risk 
of suicide. Mr. Milam believed that the inability to receive 
and discuss crucial information because of HIPAA was a 
contributing factor in his son's death. Another witness, Liza 
Long, dreaded the difficulties she would face trying to remain 
involved in her own mentally ill son's care once he turns 18 
due to privacy restrictions in HIPAA.
    I've been convening regular public forums in my district to 
discuss the state of our damaged mental health system. At each 
discussion, parents testified about the HIPAA-created 
challenges they experienced in getting the best care for their 
young-adult mentally ill children. As I have just mentioned, in 
some of these cases, the outcome was tragic.
    In 2002 my constituents, Charles and Debi Mahoney, lost 
their son, Chuck, to suicide. The warning signs were there. 
Chuck struggled with severe depression. His fraternity 
brothers, his ex-girlfriend, and college therapist all knew he 
was in danger and warned the college. But college 
administrators said federal privacy laws prevented the school 
from notifying Chuck's parents about his condition. As the 
light was chased from this young man's heart, those who were in 
a position to help did not.
    The stories of the Mahoney's, the Milam's, and those we 
will hear today compel us to act with care and compassion as we 
develop ways to overcome institutional barriers to quality 
mental health treatment.
    Ultimately, parents may be in the best position to help 
children suffering from significant mental illness by providing 
emotional support, medical history, and coordinating care with 
various mental health professionals.
    Today we will examine the ways in which federal privacy 
laws, beginning with whether HIPAA, applied properly or 
improperly, interferes with the quality of patient care or 
compromises public safety or both.
    To be sure, HIPAA's obstruction of health information-
sharing between provider and family in no way is limited to 
mental health. Some of our witnesses will testify that a 
widespread misunderstanding of what HIPAA says can prevent 
individuals with serious long-term medical conditions from 
obtaining appropriate care.
    HIPAA, as initially conceived and enacted, reflected an 
effort to replace a patchwork of state laws and regulations 
impacting the confidentiality of medical information. From the 
start, HIPAA was accompanied by considerable anxiety on the 
part of providers, or the ``covered entities.'' Fearful of new 
penalties for violating HIPAA, doctors and nurses were refusing 
to even talk about a patient's illness with caretakers, all of 
whom were caretakers, spouses, siblings, or those managing the 
affairs of their elderly parent.
    Unfortunately, ``if you want to be safe, don't tell anyone 
anything'' became the prevailing attitude at the expense of the 
patient.
    HIPAA has implications that go beyond healthcare into the 
arena of public safety. According to data from the Government 
Accountability Office, the records of 1.5 million people who 
have been either involuntarily committed to mental health 
treatment, or deemed mentally incompetent by a court of law, 
and are therefore prohibited from owning a firearm, are missing 
from the National Instant Criminal Background Check System, 
also known as NICS.
    Many states have said confusion over HIPAA has prohibited 
them from sharing these records with FBI and helping to keep 
firearms out of the hands of the violently mentally ill.
    I'm encouraged that a letter sent by our committee in mid-
February spurred the Department of Health and Human Services to 
announce last Friday plans to reform HIPAA so states could 
upload these records into NICS. I appreciate the work on this 
issue by HHS Office of Civil Rights Director Leon Rodriguez, 
who will testify here today.
    Our goal with this hearing is to peel away the numerous 
layers of misinformation surrounding HIPAA so that we can 
ensure patients are getting the right treatment and the public 
is kept safe. Sometimes this may involve communication with the 
parents or family of a patient, who often possess unique 
insight into their loved one's condition. At other times it 
involves communication with law enforcement, so providers take 
the right steps to report threats of violence.
    To that end, we will be hearing first from Mr. Rodriguez 
and Mark Rothstein. Mr. Rothstein is a professor of law and 
medicine at the University of Louisville, and a noted expert on 
the HIPAA privacy rule. From 1999 to 2008, he served as chair 
of the statutory advisory committee to the Secretary of HHS on 
health information policy.
    Next, we will hear from a panel of practitioners and family 
members who will comment on their personal experiences with 
HIPAA. Dr. Richard Martini is a Professor of Pediatrics and 
Psychiatry at the University of Utah School of Medicine. Carol 
Levine directs the United Hospital Fund's Families and Health 
Care Project, which focuses on developing partnerships between 
healthcare professionals and family caregivers.
    I want to especially thank the family members who are here 
today--Gregg Wolfe, Ed Kelley, and Jan Thomas. Gregg's son, 
Justin, who was diagnosed with a mental illness and had a 
substance addiction, died of a heroin overdose last December. 
Ed's son, Jon Paul, has had severe mental illness for the last 
14 years. These fathers' efforts to obtain the best possible 
treatment for their sons was repeatedly stymied, in no small 
part due to misinterpretations of HIPAA by those responsible 
for their care. Jan's husband, Ed, a beloved high school 
football coach, was murdered in 2009 by a young man with mental 
illness. The parents of her husband's killer believe that they 
were frustrated by HIPAA in trying to understand the full 
extent of their son's paranoid schizophrenia. To Gregg and Jan, 
I want to extend our deepest sympathies.
    We also have with us today Deven McGraw, Director of the 
Health Privacy Project at the Center for Democracy and 
Technology. This is an important subject, and I look forward to 
exploring this issue with my fellow subcommittee members at 
this hearing.

                                #  #  #

                              ----------                              


                Prepared statement of Hon. Steve Scalise

    Mr. Chairman, families across America are grieving and 
searching for answers about why America's mental health system 
has failed them and how it can be fixed. At the center of this 
investigation is a focus on the Health Insurance Portability 
and Accountability Act, otherwise known as HIPAA, which was 
passed more than fifteen years ago in an effort to promote 
patient privacy through the protection of health information 
and records. HIPAA has been highlighted as the source of many 
communication issues and roadblocks between patients, 
providers, and parental guardians. I will be submitting a 
series of questions for the record on behalf of my 
constituents, Pat and Debbie Milam, who tragically lost their 
son Mathew and experienced many obstacles within the mental 
health system. Mr. Chairman, I am committed to helping the 
Milams and other families in similarly frustrating situations 
get to the bottom of these systemic failures in America's 
mental health system. I appreciate your interest and look 
forward to continuing to work with you on this important issue.

[GRAPHIC] [TIFF OMITTED] T2190.072

[GRAPHIC] [TIFF OMITTED] T2190.073

[GRAPHIC] [TIFF OMITTED] T2190.074

[GRAPHIC] [TIFF OMITTED] T2190.075

[GRAPHIC] [TIFF OMITTED] T2190.076

[GRAPHIC] [TIFF OMITTED] T2190.077

[GRAPHIC] [TIFF OMITTED] T2190.078

[GRAPHIC] [TIFF OMITTED] T2190.079

[GRAPHIC] [TIFF OMITTED] T2190.080

[GRAPHIC] [TIFF OMITTED] T2190.081

[GRAPHIC] [TIFF OMITTED] T2190.082

[GRAPHIC] [TIFF OMITTED] T2190.083

[GRAPHIC] [TIFF OMITTED] T2190.084

[GRAPHIC] [TIFF OMITTED] T2190.085

[GRAPHIC] [TIFF OMITTED] T2190.086

[GRAPHIC] [TIFF OMITTED] T2190.087

[GRAPHIC] [TIFF OMITTED] T2190.088

[GRAPHIC] [TIFF OMITTED] T2190.089

[GRAPHIC] [TIFF OMITTED] T2190.090

[GRAPHIC] [TIFF OMITTED] T2190.091

[GRAPHIC] [TIFF OMITTED] T2190.092

[GRAPHIC] [TIFF OMITTED] T2190.093

[GRAPHIC] [TIFF OMITTED] T2190.094

[GRAPHIC] [TIFF OMITTED] T2190.095

[GRAPHIC] [TIFF OMITTED] T2190.096

[GRAPHIC] [TIFF OMITTED] T2190.097

[GRAPHIC] [TIFF OMITTED] T2190.098

[GRAPHIC] [TIFF OMITTED] T2190.099

[GRAPHIC] [TIFF OMITTED] T2190.100

[GRAPHIC] [TIFF OMITTED] T2190.101

[GRAPHIC] [TIFF OMITTED] T2190.102

[GRAPHIC] [TIFF OMITTED] T2190.103

[GRAPHIC] [TIFF OMITTED] T2190.104