Not So Fast
Do you restrict recording devices in the workplace over HIPAA concerns? You may want to rethink that move.
Those in the heavily regulated healthcare industry know that patient information is sacrosanct. And for good reason: Improper handling can result in hefty fines or criminal prosecution under the Health Insurance Portability and Accountability Act (HIPAA). Healthcare employers must often take intricate steps to safeguard protected health information (PHI), including ensuring compliance by the workforce.
The federal agency that oversees Title II of HIPAA takes this responsibility seriously. As a result, enforcement actions are on the rise. Failure to comply can result in fines over $1 million and imprisonment for up to 10 years. Thus, it is prudent to make privacy a priority.
As part of the overall effort to protect PHI, many— if not most—healthcare employers prohibit their employees from using recording devices in the workplace. In light of the proliferation of smartphones (more than half of Americans are estimated to use them), it is not uncommon for employers to specify that the use of picture phones is likewise forbidden.
If a healthcare employer fails to develop a policy of this nature, they are arguably inhibited in their ability to ensure the confidentiality and integrity of PHI, as required by HIPAA. Unfortunately, according to a recent opinion by the National Labor Relations Board (NRLB), this statutory requirement does not seem to justify an employer who wants to take any and all steps to prevent information leaking from the workplace.
The NLRB Says Employers Are Going Too Far
Many employers believe they have the absolute right to take any steps necessary to prohibit their workers from disclosing “confidential” information to certain parties. The NLRB disagrees, however, and has diligently worked to erode employers’ rights in this area.
The practice of prohibiting the use of recording devices was recently challenged by a union attempting to organize at the workplace, which claimed that the handbook violated the National Labor Relations Act (NLRA). It’s important to note that the NLRA covers all workplaces, not just those that are unionized or engaged in an organizing drive.
The NLRB ruled that enforcing the policy would actually chill the employees in the exercise of their rights. Rather than ruling that a ban on recordings would be in the employees’ best interests, the board ruled the opposite: that eliminating a blanket ban would best protect workers.
This decision, in addition to other recent board decisions, indicates that employees have the absolute right to photograph and make recordings in furtherance of their rights under the NLRA. While the rights may be absolute, furthering them cannot be limitless where patient privacy is concerned.
A Confidentiality Crossroads: What Is The Takeaway?
On the one hand, healthcare employers are obligated to comply with HIPAA and a host of other state and federal laws regarding privacy and confidentiality. On the other hand, employees have increasingly broad rights to engage in concerted activity under federal law. So where does this leave healthcare employers who might find themselves at a crossroads?
• Employers should steer clear of total bans on recording devices in the workplace.
• Employers should remember that protection of PHI is of critical importance.
• The NLRB will view a total ban on recording devices as unlawful.
Thus, healthcare employers should do the following:
• Analyze your current recording device policy.
• Analyze any other policy that may curtail the communication of confidential information.
• Ensure compliance with the latest legal developments.
• If your recording device policy includes a comprehensive ban, you should revise it.
For example, you would avoid running afoul with the NLRB if your policies only preclude your employees from recording in areas dedicated to patient care, but left open the possibility of recording in areas where patient privacy concerns do not exist. To stay out of the NLRB’s crosshairs, a narrowly tailored policy is the best approach.
For more information, contact the author at JWrigley@fisherphillips.com or (228) 822-1440.
Jaklyn Wrigley is an attorney with the Gulfport office of national labor and employment law firm Fisher Phillips. She represents employers in state and federal courts, as well as claims pending with state and federal agencies.