Use of Gross Photography in Anatomic Pathology: Legal and Ethical Implications

Need multiple seats for your university or lab? Get a quote
The page below is a sample from the LabCE course Digital Gross Photography in an Anatomic Pathology Practice. Access the complete course and earn ASCLS P.A.C.E.-approved continuing education credits by subscribing online.

Learn more about Digital Gross Photography in an Anatomic Pathology Practice (online CE course)
Use of Gross Photography in Anatomic Pathology: Legal and Ethical Implications

Photographs are necessary in the clinical practice of anatomic pathology, but there are ethical implications to consider. Furthermore, laboratory professionals and pathologists must be aware of and comply with certain legal requirements affecting the use of photographs. The main ethical principles are respect for patient privacy and the anatomic pathology specialist’s obligation to do no harm.
In 1996, the Health Insurance Portability and Accountability Act (HIPAA) was implemented to enhance the portability and continuity of health insurance coverage in the United States. HIPAA also contains a mandate for protecting the privacy of medical records. A section of HIPAA called “Subtitle F-Administrative Simplification” offers the definitions of “protected health information” (PHI) and “individually identifiable health information.” The Secretary of Health and Human Services (HHS) was tasked with the promulgation of the final regulations to accomplish the goals outlined in HIPAA. In the years that followed, the HIPAA “Privacy Rule” and the “Security Rule” were formulated by the HHS to establish the standards by which health-care providers are held accountable. The Final Privacy Rule set forth the concept of “de-identification” of health information (including medical photographs) for exemption from HIPAA requirements. The distinction between “de-identified” patient information and identifiable PHI is important because each is handled differently. For identifiable PHI, healthcare providers must follow the requirements of HIPAA and its supporting legislation. In contrast, with de-identifiable patient data is no longer considered identifiable PHI, such that the mandates and requirements of HIPAA are not applicable.
Accessed: August 21, 2020