HIPAA- Health Fair, need help ASAP, please!
Last week we conducted a health fair at a local business for their employees. We are getting paid by the company to conduct Prostate Cancer screenings on the employees who signed up for the fair. This was not mandatory. The employees signed consents for the company but not for us. We have received the results of the bloodwork and now need to contact the employees. How do we go about this and still be HIPAA compliant? Do we give the company the results? Or can we mail them directly to the employee? If the employee had a positive result can we tell them they can make an appointment with our office? Should we have had them sign a consent for us to contact them? They did sign saying that they could be contacted with educational material, is this enough? Please help!