2.2 Legal Doctrines & HIPAA

Civil Wrongs (Torts) in Radiography

A tort is a civil wrong that causes harm and gives the injured person grounds to sue for damages. Radiographers face two broad tort families: unintentional torts (negligence) and intentional torts (assault, battery, false imprisonment, defamation, invasion of privacy). The exam tests whether you can name the doctrine that fits a scenario and the action that prevents liability.

Negligence and the Four D's

Negligence is failing to do what a reasonably prudent technologist would do -- or doing what a prudent one would not -- resulting in patient harm. To win a negligence claim the plaintiff must prove four elements, the Four D's:

All four must be present. If any element is missing -- for example, no actual injury -- negligence is not established. Malpractice is professional negligence: negligence committed by a licensed professional acting in that capacity. Gross negligence is a reckless disregard for safety, distinguished from ordinary negligence.

Standard of Care

The standard of care is what a reasonably prudent radiographer with similar training would do under similar circumstances. It is the yardstick a court uses to judge dereliction. Following facility protocol, ALARA, and ARRT-taught technique is your best defense. Documentation matters: if an action was not recorded, a court may treat it as not done.

Vicarious Liability Doctrines

Two Latin doctrines appear on nearly every version of the exam.

Respondeat Superior

Respondeat superior ('let the master answer') makes an employer liable for the negligent acts of an employee committed within the scope of employment. If a staff technologist injures a patient through on-the-job negligence, the hospital can be held responsible. This does not erase the technologist's own liability -- both may be named -- but it explains why the employer is drawn into the suit. The key qualifier is 'within the scope of employment'; a technologist acting far outside assigned duties may fall outside the doctrine.

Res Ipsa Loquitur

Res ipsa loquitur ('the thing speaks for itself') applies when an injury so obviously results from negligence that the negligence is inferred without direct proof. Classic examples are a retained foreign object, a burn from equipment, or a patient falling from a table under the provider's exclusive control. Three conditions are traditionally required: the injury would not normally occur without negligence, the instrumentality was under the defendant's exclusive control, and the patient did not contribute to the injury.

Intentional Torts in Imaging

Intentional torts require a deliberate act, not merely carelessness.

Battery is the tort most tied to consent: performing an exam on a patient who has refused is battery even if the image is perfect and the intent was good. False imprisonment is a trap with immobilization -- restraints used for medical necessity and per policy are lawful, but restraining a competent patient who wants to leave is not.

HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) of 1996 sets federal rules for protecting health information. Two rules dominate exam questions:

• The Privacy Rule governs the use and disclosure of protected health information (PHI) -- any individually identifiable health information, including images, reports, names, and dates.
• The Security Rule covers electronic PHI (ePHI) with administrative, physical, and technical safeguards.

Core HIPAA concepts to memorize:

• Minimum necessary -- access and share only the PHI needed for the task.
• TPO -- PHI may be used for Treatment, Payment, and healthcare Operations without separate authorization; most other disclosures require written authorization.
• Patient rights -- patients may access and request amendment of their records and receive an accounting of disclosures.
• Disclosures required by law -- mandatory reporting (for example, certain communicable diseases or suspected abuse) is permitted even without authorization.

Everyday violations to avoid: discussing patients in elevators or hallways, leaving images or worklists visible on unattended monitors, sharing login credentials, or telling a caller whether a person is a patient. Confirming identity to unauthorized callers, or disclosing results to a spouse without consent, both breach confidentiality. Penalties are tiered by culpability, escalating from unknowing violations to willful neglect, with civil and even criminal sanctions for the most serious breaches. When a scenario asks who may see an image, the answer is those involved in the patient's treatment, payment, or operations -- nothing more.