This case study examines whether a physician's act of displaying graphic photographs of a patient who attempted suicide constitutes a breach of patient confidentiality under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its associated Privacy Rule. The paper analyzes two distinct questions: whether taking the photographs was a violation, and whether sharing them was a violation. It further considers how a nurse witnessing such a breach should respond, weighing mandatory reporting obligations, the risk of compounding the violation, and the patient's fragile mental state. The analysis concludes that while taking the photos may be justified as part of medical documentation, sharing them without clinical purpose clearly violates the Privacy Rule's minimum-access standard.
To determine whether a physician displaying graphic photos of a patient who attempted suicide constitutes a breach of that patient's confidentiality, one must examine the particular circumstances surrounding the display of the photos. First, it is important to consider the context. As described, the scenario involves a physician showing a group of approximately 15 people graphic photos of a patient. There is nothing in the scenario to suggest that the physician is showing these pictures in order to obtain help for the patient; the photos are not being used to diagnose her condition, to elicit information about treatment, or to share with police as part of an investigation into a violent incident. Instead, it appears that the photos are being shared gratuitously, which means they would likely not trigger any recognized exceptions to patient confidentiality protections.
Whether sharing the pictures violates the patient's confidentiality involves two separate but related questions: first, did taking the photos violate her confidentiality? Second, did sharing the photos violate her confidentiality? Answering both questions requires consulting the relevant legal statutes. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) mandated legal protection for confidential patient information. In response, the U.S. Department of Health and Human Services issued the "Standards for Privacy of Individually Identifiable Health Information" — known as the Privacy Rule — which governs the transmission of confidential health information.
Before answering either question, it is important to determine whether the pictures constitute the type of information protected under the Privacy Rule. At first glance, the answer might seem to be no, since photographs are not, in and of themselves, health information. However, the pictures in question are described as graphic images of a woman following a suicide attempt. According to the U.S. Department of Health and Human Services, the Privacy Rule protects individually identifiable health information, including information about an individual's mental health (2012). Photographs of a suicide patient would ostensibly allow her to be identified, and the fact that she attempted suicide is clearly information pertaining to her mental health. Therefore, the pictures would be covered under the Privacy Rule.
Although the pictures are covered under the Privacy Rule, taking the photos does not appear to violate the patient's confidentiality. A physician treating a patient who has attempted suicide may reasonably anticipate that the patient will require mental health care — possibly including an involuntary psychiatric commitment — as part of her treatment. Taking pictures to document the injuries she inflicted on herself could be a reasonable step in the provision of medical care. The patient was unable to consent due to her self-inflicted wounds, and there is insufficient information to determine whether a delay in taking the pictures could have produced an adverse medical outcome. Therefore, taking the photographs would not constitute a violation of patient confidentiality.
"Applying the minimum-access standard to sharing photos"
"Weighing reporting duties, legal risks, and patient welfare"
U.S. Department of Health and Human Services. (2012). Summary of the HIPAA Privacy Rule. Retrieved December 10, 2012, from HHS.gov website:
You’re 52% through this paper. Sign up to read the remaining 2 sections.
Sign Up Now — Instant Access Already a member? Log inAlways verify citation format against your institution’s current style guide requirements.