I then made an appointment with a doctor in city B. I asked the office if they would like me to have my records sent from the city A hospital. They told me that they had already used Epic to suck them out of the city A hospital computer.
As far as I could recall, I had not yet informed the first hospital which doctor I would be seeing in city B.
To me this seemed to imply that there are ways in which Epic can get around HIPAA. It should be necessary to give permission at the sending office before records can be transferred.
did you have a referral made?
I went to an urgent care clinic for something and had to have a prescription. ..a couple months later I visit my regular doc (not part of any clinic) and he asks why I had this prescription ...no one asked permission. ..I assume as long as both are collecting info on me, they just pass it around.