HIPAA and the Criminal Investigation

As medical practitioners and the attorneys who defend (or sue) them have learned over the last few years, health care professionals are liable for wrongful disclosure of protected health care information under HIPAA and various state statutes. Lack of sophistication of the law in this area is no excuse for turning over medical records to unauthorized recipients, and appropriate statutory requirements must always be met. But it's not always easy to tell when those safeguards on patient privacy are paramount and when other considerations might trump them. A recent case offers an interesting permutation on the question by asking: When can law enforcement authorities access medical records without the patient's authorization? The wrong answer could leave the health care facility or provider that hands over patient records vulnerable to liability for unauthorized release.

25 minute read January 26, 2005 at 12:49 AM

By

Elliott Oppenheim