I'm not sure this is where to post this question...
I work for a hospital. Is it appropriate for Social Security Office to contact our hospital's discharge planner to get more information about a patient? They wanted to check on contact information for the patient's guardian who is the SS Payee and they're unable to reach her. Our discharge planner also disclosed where the patient was released to (a mental health hospital).
This seems like a breach to me, that we breached the patient's PHI to SSO, but I'm new to this and would like others' input. Thanks in advance.