Health Insurance Portability and Accountability Act Noncompliance in Patient Photograph Management in Plastic Surgery.

Abstract

Today, plastic surgeons have largely transitioned to digital photography. This shift has introduced new risks to daily workflows, notably data theft and Health Insurance Portability and Accountability Act (HIPAA) violations. We performed a national survey of digital photograph management patterns among members of the American Society of Plastic Surgery and trainees in Accreditation Council for Graduate Medical Education-accredited plastic surgery programs. Our findings showed that attendings preferred the use of stand-alone digital cameras (91.4%), whereas trainees preferred the use of smartphones (96.1%) for capturing patient photographs. The rate of noncompliance was nearly identical; 82.8% of attendings were HIPAA noncompliant when using stand-alone digital cameras compared with 90.2% of trainees using smartphones. Both groups also breached HIPAA rules when using other photographic management modalities. This is the first study to quantify the prevalence of noncompliance with regard to an entire digital photograph management workflow. These findings were consistent with previous studies that reported that younger physicians tend to embrace newer technologies, whereas older attendings are more reluctant. The findings also suggest that HIPAA noncompliance in digital photograph security and management is a significant problem within the plastic surgery community.