8.3 HIPAA, Patient Rights & Informed Consent

The Health Insurance Portability and Accountability Act (HIPAA) of 1996 established, through its Privacy Rule, national standards protecting Protected Health Information (PHI) — any individually identifiable health information held or transmitted by a covered entity. An interpreter's legal relationship to that information depends on how they are engaged, and CoreCHI expects candidates to know the difference.

HIPAA and the Interpreter's Legal Position

• An interpreter employed directly by a hospital, clinic, or health plan is a workforce member of that covered entity and is bound by the entity's own HIPAA policies and training, the same as a nurse or receptionist.
• An interpreter contracted through an outside language-service agency, or the agency itself, is typically classified as a business associate — a person or organization that performs services involving PHI on behalf of a covered entity. Business associates must sign a Business Associate Agreement (BAA) committing them to HIPAA-compliant safeguards before they may access PHI.

Either way, the interpreter is bound by HIPAA's confidentiality obligations for everything learned during the encounter, not just by the interpreter's own professional code of ethics; the two overlap heavily but are not identical, and a HIPAA violation carries legal and regulatory consequences separate from an ethics complaint.

The Minimum Necessary Standard

HIPAA's minimum necessary standard requires covered entities and business associates to limit the use, disclosure, and request of PHI to the minimum needed to accomplish the intended purpose. For an interpreter, this means accessing only the information relevant to the assigned encounter, not browsing a patient's full chart out of curiosity, and not discussing a patient's information with colleagues, family, or on social media once the assignment ends. Confidentiality obligations survive the encounter: an interpreter who happens to recognize a patient outside of work may not confirm, deny, or discuss anything learned during the interpreted visit.

Patient Rights Under HIPAA

An interpreter is often the person who explains these rights to an LEP patient, since a Notice of Privacy Practices is typically written in dense legal English. Rendering that notice accurately, rather than paraphrasing it into a shorter, simplified version, matters because the patient is being informed of an actual legal right, not receiving general guidance.

Informed Consent: What Must Be Disclosed

Informed consent is the process by which a provider discloses enough information for a patient to make a voluntary, knowledgeable decision about proposed treatment. Valid informed consent generally requires disclosure of the diagnosis or working diagnosis; the nature and purpose of the proposed treatment or procedure; the material risks and expected benefits; reasonable alternatives, including the option of no treatment; and the risks of declining treatment.

The interpreter's role in this conversation is to render the provider's disclosure, and the patient's questions and responses, completely and faithfully, in the first person, without adding explanation, softening a risk, or offering a personal opinion about whether the patient should consent. If a patient's body language or responses suggest they do not understand despite an accurate rendition, the interpreter may transparently flag that observation to the provider — that is different from explaining the medical content, which stays outside the interpreter's role. A signed consent form does not substitute for this spoken disclosure conversation, and a certified written translation of the form is not automatically produced simply because an oral interpreter is present for the conversation. When a patient asks the interpreter what they would personally do, the correct response is to redirect the question back to the provider rather than answering it, since offering a personal recommendation would step outside the conduit role this domain assumes throughout.

Advance Directives and the Patient Self-Determination Act

The Patient Self-Determination Act of 1990 requires most hospitals, nursing homes, and other Medicare- and Medicaid-participating facilities to inform patients, at admission, of their right to make decisions about their own medical care, including the right to complete an advance directive. Common advance directive documents include a living will (written instructions about the treatment a patient wants or does not want if unable to communicate) and a healthcare power of attorney, also called a healthcare proxy (a document naming a person to make medical decisions on the patient's behalf).

LEP patients are entitled to receive this information, and to complete these documents, through a qualified interpreter rather than being left to guess at an unfamiliar form. An interpreter asked to help with an advance-directive conversation follows the same rules as any other encounter — faithful, complete, first-person rendition of the provider's explanation and the patient's stated wishes, without steering the patient toward a particular choice.