The guidance explains that even during the current COVID-19 public health emergency, covered healthcare providers are still required to obtain a valid HIPAA authorization from each patient whose PHI will be accessible to the media before the media is given access to that PHI. The guidance clarifies that masking or obscuring patients’ faces or identifying information before broadcasting a recording of a patient is not sufficient, as a valid HIPAA authorization is still required before giving the media such access. Additionally, the guidance describes reasonable safeguards that should be used to protect the privacy of patients whenever the media is granted access to facilities.
“The last thing hospital patients need to worry about during the COVID-19 crisis is a film crew walking around their bed shooting ‘B-roll,’” said Roger Severino, OCR Director. “Hospitals and healthcare providers must get authorization from patients before giving the media access to their medical information; obscuring faces after the fact just doesn’t cut it,” Severino added.
The guidance may be found at https://www.hhs.gov/sites/default/files/guidance-on-media-and-film-crews-access-to-phi.pdf – PDF.
For more information related to HIPAA and COVID-19, please visit: https://www.hhs.gov/hipaa/for-professionals/special-topics/hipaa-covid19/index.html
