While most health care providers and medical practitioners are aware of the significant limitations HIPAA places on their activities, they are less clear how to react when it’s the patient who wants to record the physician, which could potentially expose protected health information of other patients.
I was recently at my physician’s office and observed a patient recording himself and a family member in the waiting room. He continued recording as he walked down the practice hallway and entered the examination room. It was clear that the patient had not only recorded himself, but also had captured other patients in the room and their names being called. He even potentially captured conversations between patients and health care providers.
Yet no one from the practice told him to stop filming, questioned his activities, or otherwise reacted.
Has this happened in your practice? If it did, how would you react?
The above scenario is hardly surprising in the age of social media, although it was a first for me. And while most health care providers and medical practitioners are aware of the significant limitations HIPAA places on their activities, they are less clear how to react when it’s the patient who wants to record the physician, which could potentially expose protected health information of other patients.
Practices should address the issue of patients recording themselves and others by planning ahead. A practice should develop a policy for handling such activity and prepare the necessary paperwork for patients to acknowledge the policy. If a practice chooses to allow such recordings, then the policy must set the appropriate parameters for recording at the practice, such as where filming can occur, whether permission must be requested, and other necessary requirements.
Sometimes patients ask their physicians directly to record an encounter for arguably legitimate reasons, such as to help remember medical information or instructions or to share the details of the visit with caretakers or loved ones. A practice should have a separate approach for physician recordings and tailor it to physician preferences.
What happens if a patient does not ask permission and records the physician without his or her knowledge? It may not only violate the practice’s policies, but also expose the practice to liability and impact its reputation. What information was in plain sight and recorded that presented a HIPAA issue? Could the practice be liable for anything else related to the recording? How did its staff behave? Practices should be aware at all times that recordings may take place without their knowledge, so appropriate HIPAA precautions and patient interactions should be the norm throughout training and put into daily practice.
Finally, practices should be aware that patients have the right in most states to record interactions with third parties where the law only requires 1 party to consent to the recording. This means a patient does not need to inform the physician that he or she is recording at all. Other states, such as Illinois, require that both parties are aware of the recording. In these states, this means that a patient who records a physician or staff interaction without permission has actually violated the law.
I recommend exploring these issues with legal counsel to assure that your practice is properly protected and that any plan is tailored specifically to your practice’s needs. For example, the approach may be different for an internal medicine practice compared with one that focuses on cancer or communicable diseases. Knowledgeable legal counsel can assist in understanding your practice’s legal risks and potential vulnerabilities.
Ericka L. Adler has practiced in the area of regulatory and transactional health care law for more than 20 years.
This article was adapted from Medical Economics®, a sister publication of Oncology Nursing News®.