Maryland AG Says Patient Photos Trigger HIPAA

The Maryland Attorney General’s office has issued a memo to EMS providers and personnel stating that photos taken of patients who are identifiable constitutes “individually identifiable health information” under HIPAA, the release of which through any means (including social media) is a violation.

The memo was dated May 30, 2013 and began being circulated to local and regional EMS providers this week. It was issued by Assistant Attorney General Sarah M. Sette.

Quoting from the memo, HIPAA applies to “photographs of patients taken by EMS providers if the patient can be identified, whether directly through their features, or indirectly through unique clothing or a license plate or the nature of the particular injury or motor vehicle crash or event. Similarly, a photograph of a medical record such as EKG, or a unique injury or treatment, might also be susceptible to being linked to a specific patient.

“Accordingly, distributing such a photograph, whether via email, by posting it on Facebook, or through other media, may be an unauthorized disclosure of protected health information and violate HIPAA.”

The memo also discusses the penalties that violators face, including fines of up to $250,000 and 10 years in prison, and the fact that Maryland state law governing medical confidentiality, Health General Article, Sections 4-30 l, et seq., is also applicable and carries fines of up to $250,000, imprisonment, and possible civil liability to the victims.

Here is a copy of the memo. MD EMS Social Media

For those concerned, neither HIPAA nor state medical confidentiality laws prohibit the taking of photos, dash or helmet cam video, or other types of imagery. What is required is that any imagery that shows an identifiable patient must be treated as part of the patient’s confidential medical record.

 

For those currently using my digital imagery and/or social media policies… you are protected… no need to change a thing.

About Curt Varone

Curt Varone has over 40 years of fire service experience and 30 as a practicing attorney licensed in both Rhode Island and Maine. His background includes 29 years as a career firefighter in Providence (retiring as a Deputy Assistant Chief), as well as volunteer and paid on call experience. He is the author of two books: Legal Considerations for Fire and Emergency Services, (2006, 2nd ed. 2011, 3rd ed. 2014) and Fire Officer's Legal Handbook (2007), and is a contributing editor for Firehouse Magazine writing the Fire Law column.
x

Check Also

St. Louis Firefighter Charged With Fraudulent Use of Crash Victim’s Credit Card

A St. Louis firefighter has been accused of using a credit card that belongs to the victim of a vehicular accident he responded to earlier this year. Arnold Britt has been charged with one count of receiving stolen property and one count of fraudulent use of a credit or debit device.

Suit Alleges EMS Responsible for Victim’s Death, Not Homicide Suspect

A South Carolina man who is facing homicide charges has filed a rather unconventional civil rights lawsuit against first responders: he is claiming he is the victim of their failure to provide adequate medical care to the victim. Thomas Reginald Brooks filed suit pro se against nineteen defendants, including Sumter County EMS, the Sumter Police Department, and the Sumter Fire Department.