Consent, Advance Directives & HIPAA

Informed Consent in Diagnostic Imaging

Informed consent represents the legal doctrine embodying patient autonomy: a competent patient has the absolute right to decide what happens to their body.

Components of Valid Informed Consent

Valid informed consent requires that the patient (or their legal surrogate) is fully advised in understandable, non-technical language regarding:

• The nature, purpose, and detailed steps of the proposed examination.
• The anticipated clinical benefits.
• Known risks and potential complications (e.g., contrast extravasation, allergic reactions, nephrogenic systemic fibrosis, acoustic injury).
• Available alternative diagnostic examinations.
• The right to accept or refuse the procedure at any time without forfeiting standard medical care.

Types of Consent

• Written (Express) Informed Consent: Often used for invasive procedures, sedation, and other interventions as required by law and facility policy. Routine IV contrast does not universally require a separate written consent form. The patient signs a formal document witnessed by healthcare staff.
• Verbal Consent: Permissible for non-invasive, routine imaging examinations (e.g., routine non-contrast knee or brain MRI).
• Implied Consent: Legally invoked during acute, life-threatening emergencies when a patient is unconscious, comatose, or mentally incapacitated, and immediate diagnostic imaging is required to preserve life or limb. Under the law, it is presumed that a reasonable person would consent to life-saving care.

The Patient Care Partnership & Advance Directives

Published by the American Hospital Association (AHA), the Patient Care Partnership replaced the historic Patient's Bill of Rights. It articulates patient expectations regarding:

• High-quality, safe, and competent hospital care.
• A clean and secure clinical environment.
• Respect for individual values, cultural beliefs, and personal dignity.
• Active involvement in healthcare decision-making, including the right to refuse care at any juncture.
• Strict protection of personal privacy and confidentiality.

Advance Directives in the MRI Suite

Advance directives are legally recognized documents articulating an individual's healthcare preferences in the event they lose decision-making capacity:

• Living Will: Outlines specific life-sustaining treatments the patient desires or refuses (e.g., mechanical ventilation, feeding tubes).
• Durable Power of Attorney for Healthcare (Healthcare Proxy): Designates a specific surrogate decision-maker to make medical choices if the patient becomes incapacitated.
• Do Not Resuscitate (DNR) / POLST: DNR is an order addressing attempted resuscitation in arrest. POLST is a broader portable medical-order form that may address additional treatments. Authorized signers and the specific limits depend on jurisdiction and the orders; neither means that all other care stops.

Respecting the Extent of Care

A DNR order does not cancel diagnostic care, analgesia, oxygen, or other treatment outside the order's limits. Confirm the documented order and communicate uncertainties before the examination. Do not infer resuscitation status from age, diagnosis, or a relative's casual comment. In an emergency, activate assistance immediately and follow the verified order and emergency policy.

HIPAA and Confidentiality Standards

The Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules establish national standards protecting Protected Health Information (PHI). PHI encompasses any health-related data—written, verbal, or electronic—that can identify an individual (e.g., patient name, date of birth, MRN, social security number, telephone number, facial photographs, and diagnostic imaging files).

Key operational safeguards include:

• The Minimum Necessary Rule: Use role-based access and reasonable safeguards. HIPAA's minimum-necessary standard generally applies, but disclosures to or requests by a provider for treatment are an explicit exception. Looking at records of relatives, celebrities, or uninvolved patients is a severe federal violation.
• Physical Safeguards: Positioning console displays away from public view, activating password-protected screensavers, shredding disposable screening forms, and holding verbal history consultations in private dressing rooms rather than waiting areas.
• Digital and Social Media Policies: Do not post patient material on personal accounts. Cropping a name may leave other identifiers, facial anatomy, dates or device information. Report suspected unauthorized disclosures promptly to the privacy officer; the organization assesses whether a reportable breach occurred and which notifications apply. A photograph of an empty room is not automatically a HIPAA violation, though institutional photography policies still apply.