Relias Media - Continuing Medical Education Publishing

The trusted source for

healthcare information and

CONTINUING EDUCATION.

  • Sign In
  • Sign Out
  • MyAHC
    • Home
      • Home
      • Newsletters
      • Blogs
      • Archives
      • CME/CE Map
      • Shop
    • Emergency
      • All Products
      • Publications
      • Study Guides
      • Live Webinars
      • On-Demand Webinars
      • Libraries
    • Hospital
      • All Products
      • Publications
      • Study Guides
      • Live Webinars
      • On-Demand Webinars
      • Libraries
    • Clinical
      • All Products
      • Publications
      • Study Guides
      • Live Webinars
      • On-Demand Webinars
    • All Access
      • Learn More
      • My Subscription
    • My Account
      • My Subscriptions
      • My Content
      • My Orders
      • My CME/CE
      • My Transcript
    Home » Hospital investigating after ESPN publishes football player’s medical record

    Hospital investigating after ESPN publishes football player’s medical record

    September 1, 2015
    No Comments
    Reprints
    Facebook Twitter Linkedin Share Share

    Related Products

    Hospital investigating after ESPN publishes football player’s medical record

    Imaging of Glial Cell Activation in the Brains of Professional Football Players

    Hospital fires two over NFL player’s records

    Executive Summary

    A hospital is conducting an internal investigation after a patient’s medical records were obtained by a television network and published. The patient was a professional football player who had injured his hand.

    • The disclosure appears to be a clear violation of the Health Insurance Portability and Accountability Act (HIPAA).
    • The reporter who obtained the record is not subject to HIPAA restrictions.
    • The patient cannot sue the hospital under HIPAA but could seek civil damages.

    When a professional football player’s medical record was published by the sports network ESPN, even those who are outside the healthcare community scratched their heads and wondered how that could happen. The hospital administration is determined to find out.

    New York Giants pass rusher Jason Pierre-Paul sought treatment at Jackson Memorial Hospital in Miami after a fireworks accident over the Fourth of July weekend. On the following Wednesday, ESPN reporter Adam Schefter posted a photo of part of Pierre-Paul’s medical record on Twitter, with the note “ESPN obtained medical charts that show Giants DE Jason Pierre-Paul had right index finger amputated today.”

    The news was significant in the sports world because of how the injury could affect Pierre-Paul’s performance and also because some critics were questioning why a professional athlete would jeopardize his career by playing with fireworks.

    That news was almost overshadowed, however, by immediate questions about how Schefter obtained the medical record and whether it was proper to publish it. Hospital administrators learned of the disclosure quickly. Within 90 minutes of Schefter’s tweet, the Jackson Health System tweeted two statements:

    • “Federal privacy laws prevent hospitals from disclosing information about patients or their medical records without the patient’s consent.”
    • “Jackson Health System takes patient privacy seriously and aggressively investigates any alleged violation.”

    The next day, Carlos A. Migoya, Jackson Health System president and CEO, issued this statement:

    “Late Wednesday, media reports surfaced purportedly showing a Jackson Memorial Hospital patient’s protected health information, suggesting it was leaked by an employee. An aggressive internal investigation looking into these allegations is underway.

    “If these allegations prove to be true, I know the entire Jackson family will share my anguish. Our nurses, doctors, and other healthcare professionals are passionate about our patients’ health and well-being, and that includes the right to privacy. If we confirm Jackson employees or physicians violated a patient’s legal right to privacy, they will be held accountable, up to and including possible termination. We do not tolerate violations of this kind.

    “In order to protect our patients’ rights and private information, we enforce strict rules for those who handle patient information and continually educate all employees on privacy regulations. Those rules are constantly evolving as technology changes, but always remain focused on putting our patients first.”

    A spokeswoman at the Health and Human Services Office of Civil Rights, which investigates violations of the Health Insurance Portability and Accountability Act (HIPAA), issued a statement saying the office was aware of the incident but could not comment on current or potential investigations.

    Hospital at fault

    Any responsibility for a HIPAA violation falls on the hospital and perhaps individual employees, says CEO Nick Merkin of Compliagent, a compliance consulting firm in Los Angeles.

    “It’s important to clarify that, by definition, neither ESPN nor Adam Schefter, the reporter involved in the case, violated HIPAA. HIPAA regulations can only be violated by a healthcare provider, healthcare clearinghouse, or a health plan — in this case, Jackson Memorial Hospital and its related healthcare professionals,” Merkin says. “There may arguably be issues of journalistic ethics or integrity to debate, but as a legal matter, the press is not covered by HIPAA.”

    Additionally, Merkin says, there is no private right of action under HIPAA — only government-imposed fines and penalties. Thus, Jason Pierre-Paul cannot sue any party as part of a HIPAA claim, although there might be significant state law claims that he can bring, along with common law allegations such as invasion of privacy and negligence.

    The statements released by the hospital suggest it is handling the allegations of improper disclosure properly by immediately conducting a risk assessment to determine whether an actual HIPAA breach occurred, Merkin says. The results of the internal investigation will dictate the hospital’s next steps, including any breach notification requirements.

    The most important question for Jackson Memorial Hospital and other healthcare providers is where the breakdown occurred organizationally, Merkin says.

    “In other words, what compliance infrastructure was in place or was lacking that allowed for this improper disclosure to happen? Where was the faulty execution? Was it a result of deficient policies and procedures, inadequate training, ineffective monitoring and auditing, or poor compliance management and oversight?” he says. “And most important, what can be done to prevent these kind of breaches from reoccurring?”

    SOURCE

    • Nick Merkin, CEO, Compliagent, Los Angeles. Telephone: (310) 996-8950. Email: nmerkin@compliagent.com.

    Post a comment to this article

    Report Abusive Comment

    www.reliasmedia.com

    Healthcare Risk Management

    View PDF
    Healthcare Risk Management 2015-09-01
    September 1, 2015

    Table Of Contents

    Providers must tread carefully if patient objects to caregiver

    Healthcare Risk Management’ s Ebola coverage wins first place

    Nursing home bars black nurses, loses lawsuit

    New and increased liabilities emerging from Affordable Care Act

    Hospital investigating after ESPN publishes football player’s medical record

    Greater New York Hospital Association says no more reality television access

    Infant injured by an ‘old school’ trick that most hospitals and healthcare systems ban

    Sleep apnea can pose malpractice risk in surgery

    Work hour restrictions not improving safety

    UCLA Health targeted in cyber attack

    Research confirms ‘weekend effect’ on patient safety

    Physician not following through on proposed plan costs hospital $4.8 million

    Failure to transfer patient to a qualified facility results in $23 million jury verdict

    Clarification

    Begin Test

    Buy this Issue/Course

    Shop Now: Search Products

    • Subscription Publications
    • Books & Study Guides
    • Webinars
    • Group & Site
      Licenses
    • State CME/CE
      Requirements

    Webinars And Events

    View All Events

    Free Email Newsletters

    All Fields Required

    E-Newsletter Options
    • Accreditation Council for Continuing Medical Education
    • American Nurses Credentialing Center
    • American College of Emergency Physician
    • American Board of Internal Medicine: Maintenance of Certification
    • California Board of Registered Nursing
    • Commission for Case Manager Certification
    • American Academy of Pediatrics
    • American Osteopathic Association
    • Home
      • Home
      • Newsletters
      • Blogs
      • Archives
      • CME/CE Map
      • Shop
    • Emergency
      • All Products
      • Publications
      • Study Guides
      • Live Webinars
      • On-Demand Webinars
      • Libraries
    • Hospital
      • All Products
      • Publications
      • Study Guides
      • Live Webinars
      • On-Demand Webinars
      • Libraries
    • Clinical
      • All Products
      • Publications
      • Study Guides
      • Live Webinars
      • On-Demand Webinars
    • All Access
      • Learn More
      • My Subscription
    • My Account
      • My Subscriptions
      • My Content
      • My Orders
      • My CME/CE
      • My Transcript
    • Help
    • Search
    • About Us
    • Sign In
    • Register
    Relias Media - Continuing Medical Education Publishing

    The trusted source for

    healthcare information and

    CONTINUING EDUCATION.

    Customer Service

    customerservice@reliasmedia.com

    U.S. and Canada: 1-800-688-2421

    International +1-404-262-5476

    Accounts Receivable

    1-800-370-9210
    ReliasMedia_AR@reliasmedia.com

    Mailing Address

    • 1010 Sync St., Suite 100
      Morrisville, NC 27560-5468
      USA

    © 2019 Relias. All rights reserved.

    Privacy Policy  Terms of Use  Contact Us  Reprints  Group Sales

    For DSR inquiries or complaints, please reach out to Wes Vaux, Data Privacy Officer, DPO@relias.com

    Design, CMS, Hosting & Web Development :: ePublishing