Patient Privacy: Include Photography Rules in HIPAA Policy

Why This Topic Matters

Healthcare organizations face legal, reputational, and operational risk when patient images, recordings, or stored data are mishandled. The article highlights why privacy policies and device security controls matter for reducing exposure and responding to incidents.

Article Sections

1. Patient photography, video imaging, and audio recording

   Discusses privacy concerns tied to capturing patient images or recordings in care settings. The section focuses on policy considerations for governing allowable use, consent, creation, disclosure, and retention.

2. Theft risk and laptop encryption

   Covers the risk of stolen portable devices containing patient information and the importance of encryption and notification planning. The section uses a theft incident to illustrate security concerns for removable media.

3. Data breach affecting doctors

   Describes an accidental disclosure involving physicians’ personal information in state filings and the resulting privacy and monitoring response. The section addresses how an exposure can affect providers rather than patients.