This document will assist both hospital public relations personnel and the news media with communication about patients and any other hospital-related information requested by the media. It will provide reporters with information about hospitals' legal and ethical responsibilities to patients in reporting admission and patient status and in sharing other data about the patient.
HIPAA
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) mandated regulations that govern privacy, security and administrative simplification standards for healthcare information. The final Privacy Rule became effective in April 2001, and all hospitals must be compliant by April 14, 2003. HIPAA requires major changes in how healthcare organizations manage all health information, including patient records.
The HIPAA Privacy Rule sets forth minimum standards, mandated by federal law, which hospitals must follow with regard to the release of patient information. State law and individual hospital policies may be more restrictive than what is required in the HIPAA guidelines. In such instances, the more restrictive policy takes precedence.
Among other things, the HIPAA privacy regulations restrict the information that healthcare providers may include in a facility directory and release to the public, including news media. Directory information is limited to four elements, and patients have the option of further restricting release of the directory information. The directory elements are:
Please note: The HIPAA Privacy Rule requires that all patients be given the opportunity to opt out of the patient directory. If a patient chooses to opt out, no information can be released about that patient. Unless a patient has exercised the opt-out provision, directory information about a patient (excluding the religious affiliation information) can be shared with any person, including members of the news media, who inquires about the patient by name.
No Public Record Cases
No matter how a person arrives at the hospital, the conditions surrounding his/her illness or injuries, or how important or well known he or she may be, HIPAA requires the hospital to ensure privacy. Previously, hospitals in Colorado provided specific information to the media when a patient had been involved in a matter of public record. This distinction is no longer possible. Unless authorized in writing by the patient or a patient's representative, the hospital is limited to providing only the facility directory information, as previously stated.
Mutual Obligations
It is the responsibility of news personnel to determine what constitutes news. However, it is the moral and legal responsibility of hospitals to ensure proper and safe care of all patients, to protect the patient's right to privacy and the confidential nature of hospital medical records, and to abide by federal and state privacy laws, including HIPAA.
Within the limits of their mutual capabilities and responsibilities, hospitals and news media organizations have a joint interest in working together to see that news is reported accurately and promptly.
Release of Patient Information
A hospital's first responsibility is to the health and welfare of the patient. The patient has specific legal rights to privacy. The patient's medical information by law is private and confidential. Medical information is subject to release only with the permission and written authorization of the patient or patient's legal representative or as required by law.
Unless the patient opts out, directory information will be released to the media, providing the request includes the patient's name. Directory information may be delayed or unavailable for a patient who is unconscious or in an emergency situation.
Patient Condition
The hospital spokesperson may not speculate on how, why or what caused the patient's injury or illness, but may offer a one-word patient condition while the individual is a patient in the facility. Hospitals generally use the following definitions of patient condition:
The hospital spokesperson may indicate that a patient has been treated and released or treated and transferred.
Please note: Stable is not a condition nor should it be used with critical condition, as by definition critical indicates "vital signs are unstable and not within normal limits."
Authorized Spokesperson
Each hospital has a designated person on duty to handle media inquiries at all times, either at the hospital or on-call. The spokesperson has the authority to release information to representatives of the news media, as outlined in this document.
Gaining Access to Hospitals & Patients
Media representatives and photographers MUST contact the hospital spokesperson for access to the hospital. Hospitals require that a hospital representative accompany news personnel at all times within the facility.
All interviews with patients MUST be coordinated through the hospital public relations department. Written authorization from the patient is needed to obtain medical information beyond directory information, including photographs or interviews. If the patient is a minor, written authorization must be obtained from a parent or legal guardian.
Please note: Hospitals may deny the media access to a patient if it is determined that the presence of photographers or reporters would aggravate the patient's condition or interfere with appropriate clinical care.
Addendum
The following guidelines are provided to ensure that all state and federal laws pertaining to the release of medical information to the news media are followed. Hospitals, physicians, patients and members of the news media shall adhere to these guidelines.
Hospital Guidelines
Although hospitals are viewed as public service institutions, medical information is not open public record. Hospitals have an ethical and legal obligation to keep medical information private and confidential, and medical records are not subject to Open Records Law. Federal and Colorado laws require hospitals to protect the confidentiality of medical information. (C.R.S. 18-4-412, C.R.S. 24-72-204 and C.R.S. 25-1-121.) Additional Release of Information Guidelines for Police, Fire and EMS professionals are published by the Emergency Services Public Information Officers of Colorado (www.espioc.org).
Physician Guidelines
Physicians should cooperate with the hospital spokesperson and be familiar with hospital media policies consistent with safeguarding the life and health of the patient and respecting the confidential nature of the doctor-patient relationship.
Physicians should not speculate on prognosis; however, information concerning the nature of the injuries or illness, degree of seriousness and current condition may be made available, if the patient has granted written authorization.
News Media Guidelines
Equal Access of Media
All news media should be given equal access to the release of general information. However, if a reporter, through his or her own initiative, obtains an exclusive story concerning a hospital, physician or patient, the right to that exclusive should be respected. In the sense of fairness, the hospital will not take the initiative in giving that story to another news agency. If, however, the hospital spokesperson is approached regarding the same story by another media outlet, he/she is obligated to release the information to that media outlet as well, within the limitations of the privacy regulations. If a family or patient specifically requests that a particular media outlet be given exclusivity to a story, that request will be honored by the hospital.
Patient Guidelines
Special Circumstances Related to Release of Information
Confidentiality of medical information is not surrendered without patient authorization. The HIPAA Privacy Rule does not make an exception for patients involved in matters of public record, famous persons, public figures or for items of unusual news interest. When public interest exists, the hospital should be prepared to respond to media requests for information according to these guidelines.
Reportable Diseases
The Colorado Department of Public Health and Environment (CDPHE) has set forth explicit regulations for the reporting of specific epidemic and communicable diseases (6 C.C.R. § 1009-1). The reporting is done in the strictest confidence, and the information should remain confidential. Media inquiries on epidemic and communicable diseases may be directed to the CDPHE. Hospital personnel cannot release information about individual patients hospitalized with possible or confirmed communicable diseases. Information about patients is restricted to directory information.
Mass Casualties
The HIPAA Privacy Rule does not make provisions for releasing patient information to the public in the case of mass casualty events. It does allow the hospital to provide limited information to an authorized agency (i.e., law enforcement or Red Cross) for disaster relief for the purpose of notifying family members or significant others of the individuals' locations and general conditions.
In extraordinary situations, such as disasters, the public may benefit from the release of general information when specific information is not yet releasable. For example, a spokesperson may say, "The facility is treating four individuals as a result of the explosion." The hospital spokesperson may state the number of patients who have been brought to the facility by gender or by age group (adults, children, teenagers, etc.). This type of general information may help reduce undue anxiety.
HIPAA web site: www.hhs.gov/ocr/hipaa