Question

Difficulty: MediumConfidentiality and Privacy

A 31-year-old man is evaluated in the emergency department for a fractured zygomatic arch sustained during a fistfight outside a local tavern. He is awake, alert, and oriented to person, place, and time. His vital signs are stable, and he is currently awaiting discharge instructions. A police officer arrives at the emergency department and states that the patient is a suspect in an aggravated assault investigation. The officer asks the physician for the patient's blood alcohol concentration and urine drug screen results to include in the official police report. The officer does not have a warrant, court order, or administrative subpoena. Which of the following is the most appropriate action by the physician?

  1. Decline the request and state that the results cannot be released without a warrant or the patient's consentAnswer
  2. B
    Provide the laboratory results to the officer because the investigation involves a potential felony
  3. C
    Verbally confirm the toxicology results to the officer but refuse to provide printed copies of the medical record
  4. D
    Ask the patient's spouse to provide surrogate consent for the release of the requested information to law enforcement
  5. E
    Disclose the results to the officer under the mandatory reporting requirements for violent injuries

Answer

Decline the request and state that the results cannot be released without a warrant or the patient's consent.
The correct action is to decline the officer's request. The Health Insurance Portability and Accountability Act (HIPAA) strictly protects patient health information. Physicians are only permitted to disclose this information to law enforcement without patient consent under specific circumstances, such as when presented with a valid court order, warrant, or administrative subpoena. Because the patient is competent and the officer does not possess the requisite legal documentation, the physician must prioritize patient confidentiality and refuse to release the toxicology results.

Step-by-Step Solution

1
Assess the patient's clinical and legal status regarding consent.
The patient is an adult who is awake, alert, and has full decision-making capacity.
Establishing capacity confirms that the patient retains the sole right to consent to the release of their medical information.
2
Evaluate the law enforcement officer's request against HIPAA privacy regulations.
The officer is requesting protected health information (toxicology results) without a warrant, court order, subpoena, or the patient's consent.
Law enforcement requests for medical records must be accompanied by proper legal authorization unless a specific exception (e.g., imminent threat to public safety, specific mandatory reporting law) applies.
3
Determine the appropriate response to the officer.
The physician must refuse the request to maintain patient confidentiality.
Releasing the information without proper authorization violates the patient's privacy rights under federal law.

Key Concept

Under HIPAA, physicians may not disclose protected health information to law enforcement for investigative purposes without a court order, warrant, subpoena, or explicit patient consent, except in specific mandated reporting scenarios (e.g., gunshot wounds).
Rate this question