Maryland AG Says Patient Photos Trigger HIPAA

The Maryland Attorney General’s office has issued a memo to EMS providers and personnel stating that photos taken of patients who are identifiable constitutes “individually identifiable health information” under HIPAA, the release of which through any means (including social media) is a violation.

The memo was dated May 30, 2013 and began being circulated to local and regional EMS providers this week. It was issued by Assistant Attorney General Sarah M. Sette.

Quoting from the memo, HIPAA applies to “photographs of patients taken by EMS providers if the patient can be identified, whether directly through their features, or indirectly through unique clothing or a license plate or the nature of the particular injury or motor vehicle crash or event. Similarly, a photograph of a medical record such as EKG, or a unique injury or treatment, might also be susceptible to being linked to a specific patient.

“Accordingly, distributing such a photograph, whether via email, by posting it on Facebook, or through other media, may be an unauthorized disclosure of protected health information and violate HIPAA.”

The memo also discusses the penalties that violators face, including fines of up to $250,000 and 10 years in prison, and the fact that Maryland state law governing medical confidentiality, Health General Article, Sections 4-30 l, et seq., is also applicable and carries fines of up to $250,000, imprisonment, and possible civil liability to the victims.

Here is a copy of the memo. MD EMS Social Media

For those concerned, neither HIPAA nor state medical confidentiality laws prohibit the taking of photos, dash or helmet cam video, or other types of imagery. What is required is that any imagery that shows an identifiable patient must be treated as part of the patient’s confidential medical record.

 

For those currently using my digital imagery and/or social media policies… you are protected… no need to change a thing.

About Curt Varone

Curt Varone has over 40 years of fire service experience and 30 as a practicing attorney licensed in both Rhode Island and Maine. His background includes 29 years as a career firefighter in Providence (retiring as a Deputy Assistant Chief), as well as volunteer and paid on call experience. He is the author of two books: Legal Considerations for Fire and Emergency Services, (2006, 2nd ed. 2011, 3rd ed. 2014) and Fire Officer's Legal Handbook (2007), and is a contributing editor for Firehouse Magazine writing the Fire Law column.
x

Check Also

Oklahoma Fire Department Sued For Wrongful Death

The Skiatook Fire Department is being sued by the estate of a man who died in 2021 after not being transported to the hospital. James Lee Bodley passed away sometime between January 18, 2021 when he first called for medical aid, and January 20, 2021 when his family discovered his body.

Georgia Firefighter Claims Whistleblower Retaliation Because He Testified in Support of Earlier Whistleblower

A Georgia firefighter who testified in a whistleblower retaliation suit brought by a colleague, has filed his own whistleblower retaliation suit claiming he was purposefully passed over for promotion. Jeffry Bird filed suit last month naming Fire Chief Wade Elmore and the City of College Park as defendants.