2.4 Health Information Privacy (HIPAA § 164.512(g)), Public Records, and Subpoenas

Health Information Privacy and the Medicolegal Exception (HIPAA 45 CFR § 164.512(g))

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule (45 CFR Part 160 and Part 164, Subparts A and E) strictly regulates the use and disclosure of Individually Identifiable Health Information, termed Protected Health Information (PHI). Healthcare providers, hospitals, health maintenance organizations, laboratories, emergency medical service (EMS) agencies, and pharmacies are designated under the statute as Covered Entities.

A pervasive operational obstacle encountered by medicolegal death investigators is the erroneous refusal of hospital risk managers, nursing supervisors, or medical records clerks to release decedent clinical charts, citing HIPAA privacy restrictions. The F-ABMDI must master the statutory mechanics of the Privacy Rule to immediately counter these unlawful delays.

The Statutory Medicolegal Mandate: 45 CFR § 164.512(g)(1)

Under 45 CFR § 164.512, the Privacy Rule explicitly enumerates Uses and disclosures for which an authorization or opportunity to agree or object is not required. Specifically, § 164.512(g) establishes the sovereign medicolegal exception:

(g) Standard: Uses and disclosures about decedents.
(1) Coroners and medical examiners. A covered entity may disclose protected health information to a coroner or medical examiner for the purpose of identifying a deceased person, determining a cause of death, or other duties as authorized by law. A covered entity that also performs the duties of a coroner or medical examiner may use protected health information for the purposes given in this paragraph.
(2) Funeral directors. A covered entity may disclose protected health information to funeral directors, consistent with applicable law, as necessary to carry out their duties with respect to the decedent...

+------------------------------------------------------------------------------------------+
|                       HIPAA 45 CFR § 164.512(g)(1) LEGAL REALITY                         |
+------------------------------------------------------------------------------------------+
|  WHAT IS NOT REQUIRED:                   WHAT IS STATUTORILY AUTHORIZED:                 |
|  - NO Next-of-Kin HIPAA release form     - Immediate disclosure of full medical records  |
|  - NO Court order signed by a judge      - Release of EMS run sheets & telemetry strips  |
|  - NO Formal grand jury subpoena         - Release of psychiatric & therapy notes        |
|  - NO 30-day waiting period              - Release of pharmacy dispensing histories      |
|  - NO Patient authorization              - Physical release of antemortem blood tubes    |
+------------------------------------------------------------------------------------------+

Under this federal exception, covered entities are legally authorized to release all medical records, EMS prehospital care reports, diagnostic imaging, pathology slides, and toxicological data directly to the medical examiner, coroner, or credentialed medicolegal death investigator without requiring:

1. Signed authorization or consent from the surviving next of kin;
2. A judicial subpoena or court order;
3. A formal warrant or legal affidavit.

In addition, state penal and public health codes routinely establish that refusal to provide medical records to an authorized medicolegal death investigator investigating a jurisdictional death constitutes a statutory misdemeanor (obstruction of a medicolegal death investigation).

The 50-Year Postmortem Rule: 45 CFR § 164.502(f)

Under the HIPAA Omnibus Final Rule of 2013, the United States Department of Health and Human Services (HHS) established the duration of postmortem PHI protection under 45 CFR § 164.502(f). An individual's health information remains protected under HIPAA for 50 years following the date of death. After 50 years have elapsed, the records cease to be PHI under federal law. However, during that 50-year period, the § 164.512(g) exception remains continuously active, granting the ME/C permanent access to records for unresolved cold cases, historical unidentified remains, or posthumous exonerations.

---

Acquisition Protocols for Antemortem Medical and Psychiatric Records

When investigating deaths involving hospitalization, chronic disease, suspected medical negligence, surgical complications, or drug toxicity, the investigator must obtain specific categories of antemortem documentation:

Priority Medical Record Categories

• Inpatient Chart Components: History and Physical (H&P), nursing intake flow sheets, physician daily progress notes, consultation reports, Medication Administration Records (MAR), vital sign trend logs, and the official death summary.
• Prehospital EMS Run Reports: Initial scene assessment, prehospital vital signs, Glasgow Coma Scale (GCS), electrocardiogram (ECG) rhythm strips, naloxone administration logs, defibrillation records, and endotracheal tube placement documentation.
• Operative and Anesthesia Records: Pre-anesthesia assessment, American Society of Anesthesiologists (ASA) physical status classification, intraoperative fluid and blood loss records, anesthesia machine agent logs, anesthetic gases, reversal agents, surgical incision-to-closure timelines, and intraoperative arrest resuscitation efforts.
• Radiological and Imaging Data: Diagnostic reports and digital DICOM files on optical media (antemortem CT, MRI, plain radiographs). Essential for comparative anatomical identification (frontal sinus patterns, surgical implants, bone trabecular architecture).
• Prescription Drug Monitoring Programs (PDMP / PMP): State-administered electronic databases tracking all controlled substance prescriptions dispensed by retail and outpatient pharmacies. Reveals doctor-shopping patterns, opioid-benzodiazepine co-prescribing, and recent fill dates.

The Critical Rule of Hospital "Admission Blood"

In deaths resulting from motor vehicle collisions, assaults, overdoses, or chemical exposures where the decedent survived for several hours or days in the hospital prior to death, postmortem blood collected at autopsy is scientifically useless for determining intoxication at the time of the incident due to ongoing metabolic clearance, massive intravenous fluid resuscitation, and blood transfusions. The investigator must immediately serve a statutory evidence hold on the hospital clinical laboratory to impound all remaining pre-transfusion admission blood and urine specimens drawn in the Emergency Department. These biological tubes must be transferred under strict chain of custody to the forensic toxicology laboratory.

Substance Use Disorder Records: Navigating 42 CFR Part 2

Federal confidentiality regulations under 42 CFR Part 2 govern patient records maintained by federally assisted substance use disorder (SUD) treatment programs. While 42 CFR Part 2 is substantially more restrictive than general HIPAA rules regarding commercial disclosure, § 2.15 explicitly permits disclosure of patient records to determine cause and manner of death pursuant to state death investigation statutes. When confronted with resistance from addiction treatment centers, the investigator should issue a formal statutory demand letter citing 42 CFR § 2.15 and state MDI enabling statutes.

---

Public Records Laws: FOIA, State Sunshine Acts, and Privacy Exemptions

Every medicolegal jurisdiction operates within a framework of public transparency governed by the federal Freedom of Information Act (FOIA, 5 U.S.C. § 552) (for federal agencies) or State Open Records Acts / Sunshine Laws (e.g., California Public Records Act, Texas Public Information Act, Florida Sunshine Act, New York Freedom of Information Law).

The Jurisdictional Divide: Autopsy Report Public Status

States fall into two major legal philosophies regarding whether an autopsy report is a public record:

1. Public Record States (e.g., Florida, Texas, Ohio, North Carolina): Finalized autopsy reports are classified as public documents. Any citizen, journalist, or commercial entity can inspect and copy an autopsy report upon payment of standard duplication fees, once the case is finalized.
2. Confidential / Restricted Record States (e.g., California, Virginia, Pennsylvania, New York): Autopsy reports are classified as confidential medical records or criminal investigative records. Access is strictly limited to legal next of kin, treating physicians, prosecuting attorneys, and law enforcement agencies handling the investigation.

Investigative Law Enforcement Holds

In public record states, an active homicide investigation creates a direct conflict between public transparency and criminal prosecution. If an autopsy report contains covert details known only to the perpetrator (e.g., unique ligature knot configurations, internal wound dimensions, or toxicology findings), releasing the report could compromise the investigation. In such cases, the District Attorney or lead police agency files a formal Investigative Law Enforcement Hold or motion to seal, temporarily exempting the autopsy report from public disclosure until an arrest is effected or charges are formally filed.

Scene and Autopsy Photographs: The Favish Doctrine

Unlike written autopsy reports, scene and autopsy photographs are almost universally exempt from general public disclosure across all fifty states. This principle is anchored in federal constitutional and state statutory jurisprudence:

• National Archives and Records Administration v. Favish, 541 U.S. 157 (2004): The United States Supreme Court ruled unanimously that surviving family members possess a distinct, legally protected privacy interest in shielding postmortem images of their deceased relatives from public exploitation. The Court held that to overcome this privacy shield under FOIA Exemption 7(C), the requester must demonstrate a significant public interest showing evidence of government impropriety, rather than mere public curiosity.
• State Protective Statutes: States have enacted specific legislation prohibiting public release of autopsy and scene photographs without a court order upon a showing of good cause (e.g., Florida Statute § 406.135, the Earnhardt Family Protection Act).

---

Subpoenas, Depositions, and Courtroom Testimony

Medicolegal death investigators regularly receive compulsory legal process commanding testimony or document production. Managing these legal demands requires absolute adherence to procedural protocols.

+------------------------------------------------------------------------------------------+
|                                 TYPES OF LEGAL SUBPOENAS                                 |
+------------------------------------------------------------------------------------------+
|  SUBPOENA DUCES TECUM                               SUBPOENA AD TESTIFICANDUM            |
|  - Commands the production of tangible items        - Commands the personal appearance   |
|  - Case reports, field notes, audio logs            - Requires oral sworn testimony      |
|  - Radiographs, autopsy photos, chain of custody    - Criminal trials, grand juries      |
|  - Must be accompanied by valid jurisdiction        - Civil depositions & arbitrations   |
+------------------------------------------------------------------------------------------+

Processing Subpoenas Duces Tecum

Upon receiving a subpoena duces tecum:

1. Verify Jurisdiction: Determine whether the issuing court possesses territorial jurisdiction. An out-of-state state court subpoena has no legal force unless domesticated through the Uniform Act to Secure the Attendance of Witnesses from Without a State in Criminal Proceedings.
2. Legal Counsel Review: Route civil litigation subpoenas immediately through county counsel, city attorney, or office legal counsel to evaluate whether a Motion to Quash or Protective Order is warranted (e.g., when a subpoena seeks confidential draft notes or unredacted autopsy photographs in a civil dispute).
3. Chain-of-Custody Production: Produce only certified, authenticated true copies of the official permanent case record. Never release original evidence, biological slides, or sole-source photographic files without a specific judicial court order.

Depositions and Testimony Best Practices

In civil and criminal proceedings, medicolegal death investigators testify primarily as objective fact witnesses, rather than expert witnesses (expert opinion regarding cause and manner is the legal domain of the forensic pathologist):

• Pre-Deposition Preparation: Review all contemporaneous scene notes, evidence logs, audio recordings, and photographic logs prior to entering the deposition room.
• Adherence to Contemporaneous Documentation: Testify strictly to observed facts, recorded measurements, and documented witness statements. If an investigator cannot independently recall an event from five years prior, the correct response is: "I do not have an independent recollection, but my contemporaneous scene report reflects..."
• Avoiding Speculative Traps: Opposing counsel will frequently invite the investigator to speculate on medical mechanisms, time of death ranges, or psychological intent. The investigator must firmly decline speculation, stating: "That assessment lies outside my factual scene observations and is within the professional purview of the forensic pathologist or toxicologist."