A Florida hospital employee provided medical information about a defensive lineman for the New York Giants to an ESPN reporter. The reporter posted part of the player’s medical record on social media.
The hospital, as a HIPAA covered entity, had an obligation to keep the medical records of its patients confidential. Hospital employees need the patient’s consent to disclose personal medical information.
The hospital is investigating the alleged unauthorized disclosure, and had indicated that if true, it would have violated hospital policy.