A photographed hospital record and documented response

Overview

A photograph of a patient’s hospital-system screen, including diagnosis, appeared in a Facebook group. Asian Hospital investigated chart access, notified the patient and NPC, documented remedial measures and provided proof of patient notice. The NPC found the response sufficient and closed the breach matter.

Practice implications

Parao Law practice guidance

For physicians

Report suspected screen photographs or chart leaks immediately. Preserve access logs and identify who could view or capture the record. Help the privacy team explain the exposure and available assistance to the patient; routine staff confidentiality promises are no substitute for investigating a concrete incident.

For lawyers

Create an incident record that ties the exposure to access logs, investigation steps, patient notice, proof of delivery and corrective measures. Assess notification against the governing criteria. This resolution closed a documented breach response on its facts; it does not make every similar exposure harmless.