Police access to medical records in cases of police brutality

Medical records serve as important evidence in cases of alleged police brutality, documenting injuries and treatment that may support or refute claims of excessive force. According to the FBI Law Enforcement Bulletin titled Protected Health Information and Use-of-Force Investigations, "One of the critical components of the use-of-force investigation involves determining whether suspects suffered serious harm or injury due to police actions.” This displays the importance of balancing investigation and accountability.

Law enforcement exceptions

The Health Insurance Portability and Accountability Act (HIPAA) of 1996 established national standards to protect sensitive patient health information. However, HIPAA contains specific provisions that permit disclosure of protected health information (PHI) to law enforcement under certain circumstances.

According to the FBI Law Enforcement Bulletin “While law enforcement agencies and use-of-force investigators do not need advanced expertise in all of the nuances of these highly complex regulations, they must have general familiarity regarding the HIPAA statute and privacy rules and how to carefully comply with all requirements." 

HIPAA provisions relevant to law enforcement

According to the American Medical Association's Guidelines for Releasing Patient Information to Law Enforcement, the HIPAA Privacy Rule permits healthcare providers to disclose Protected Health Information (PHI) to law enforcement officials without a patient's authorization in certain circumstances, including:

• Court-ordered subpoenas, warrants, or summonses: A hospital may release patient information in response to a warrant or subpoena issued or ordered by a court or a summons issued by a judicial officer. The hospital may disclose only that information specifically described in the subpoena, warrant, or summons. Hospitals should establish procedures for helping their employees determine whether a document labeled “subpoena,” “warrant” or “summons” has been issued by a court or judicial officer.
• Grand jury subpoenas: A hospital also may disclose patient information in response to a subpoena issued by a grand jury. Only information specifically described in the subpoena may be disclosed.
• Administrative requests, subpoenas, or summonses: An administrative request, subpoena, or summons is one that is issued by a federal or state agency or law enforcement official, rather than a court of law (for example, a subpoena issued by the attorney general). If a hospital receives an administrative request, subpoena, or summons, a civil or authorized investigative demand, or other similar process authorized by law, patient information may be disclosed only if each of the requirements in the “three-part test” are met.
• Disclosures for identification and location purposes: In response to a request by a law enforcement official, a hospital may release certain limited information to the official for purposes of identification and location of a suspect, fugitive, material witness, or missing person. A hospital may disclose only the following information:

• Name and address;

• Date and place of birth;

• Social security number;

• ABO blood type and rh factor;

• Type of injury;

• Date and time of treatment;

• Date and time of death, if applicable; and

• A description of any distinguishing physical characteristics 

• Victims of a crime. In response to a request by a law enforcement official, a hospital may disclose information to the official about a patient who may have been the victim of a crime, if the patient agrees to the disclosure. Such agreement may be oral, but should be documented. If the patient is incapacitated or some other emergency circumstance prevents the hospital from obtaining the individual’s agreement, the hospital may disclose information to the law enforcement official only if certain requirements are met.
• Custodial situations: A hospital may disclose to a correctional institution or a law enforcement official having lawful custody of an inmate or other individual information about such inmate or individual if the institution or official represents that such information is necessary for any of the following: The provision of health care to such individual; The health and safety of such individual, other inmates, officers, employees or others at the institution or involved in transport of the individual; Law enforcement purposes on the premises of the correctional institution; or The administration and maintenance of the safety, security, and good order of the correctional institution.

The complexity of medical documentation

The process of documenting injuries in potential use-of-force cases is a bit more complex than many realize, as The Law Enforcement Bulletin explains that injuries sustained during police use-of-force incidents can sometimes be misleading in severity. The authors, who are emergency physicians and police use-of-force researchers, have observed cases where seemingly severe injuries—such as gunshot wounds or dog bites—were ultimately classified as minor. Conversely, injuries that appeared minor, like scrapes or bruises, sometimes indicated severe or even life-threatening internal damage. This shows the complexity of assessing injuries and the need for thorough medical evaluation in such cases.

The study Injuries Associated with Police Use of Force, published in The Journal of Trauma and Acute Care Surgery, revealed that "over 75 percent of suspects taken to an emergency department after police use of force were discharged without serious harm." This statistic reveals the challenges of documenting injuries in police use-of-force incidents. Medical documentation must carefully record not just the injuries, but also their potential sources and severity

A revealing study, Emergency Department Documentation of Alleged Police Use of Excessive Force in Cases Where Formal Complaints Are Ultimately Filed, examined documentation practices in cases of alleged police use of excessive force. In a review of 235 formal complaints, researchers found that:

• Only 33 (14.0%) patients presented to the emergency department within 7 days of the incident
• Just 13 charts (39.4%) contained 3 or more of the 4 components considered necessary in potential assault documentation
• 11 charts (33.3%) included problematic documentation, such as:
  • Attributing guilt to the patient
  • Using subjective terminology
  • Relying solely on law enforcement's description of events
• Only 14 charts (42.4%) documented the patient's specific concern about use of excessive force

The study concluded that emergency department documentation in these cases frequently fails to meet standard documentation practices for assault and abuse, potentially impacting both citizens and officers involved.

Practical and ethical concerns

Potential for evidence interference

One of the concerns involves the integrity of medical evidence when accessible by the very department under scrutiny:

1. Access timing: Early access to medical records could theoretically inform departmental narratives before independent investigations begin.
2. Documentation emphasis: Knowledge of medical findings might influence which aspects of an incident are emphasized in official reports and which are minimized.
3. Investigative direction: Information from medical records might shape questioning of witnesses or the involved officers, potentially before external oversight begins.
4. Chain of custody questions: Questions may arise about whether records were accessed appropriately and whether the information flow was properly documented.

A resource guide on understanding bias, provided by the Department of Justice, states, “Implicit bias does not require animus; it only requires knowledge of a stereotype to produce discriminatory actions.”

Systemic considerations

The systemic relationship between law enforcement and healthcare providers introduces additional layers of complexity:

1. Institutional relationships: In smaller communities, close working relationships between hospitals and police departments may create implicit biases in how information requests are handled.
2. Police presence during treatment: When officers are present during medical treatment (common in arrest situations), their observations and interactions may influence documentation. According to Profiling, Privacy, and Protection: Ethical Guidance When Police Are Present at Bedside, "Law Enforcement Officials presence may intimidate Healthcare Professionals, blunting their willingness to advocate for their patient and risk revealing medical information to LEOs that should be confidential."
3. Defensive documentation: Healthcare providers aware that records may become evidence in misconduct cases might document differently than they otherwise would.
4. Jurisdictional variations: Variations exist in how different jurisdictions handle these cases, creating inconsistent protections across different areas.
   
   

Case examples

Medical records play a role in investigating potential police misconduct, but the path to transparency is often challenging. Two high-profile cases show how intricate medical documentation in cases of alleged police brutality can be.

The Ronald Greene case

In 2019, Ronald Greene's death at the hands of Louisiana State Police revealed the importance of medical documentation in uncovering the truth. What initially appeared to be a simple car crash fatality soon exposed a much darker narrative.

Medical evidence vs. official narrative 

The official police report claimed Greene died from injuries sustained in a car crash. However, medical documentation told a different story:

• A medical report documented Greene as bruised and bloodied, with stun-gun prongs embedded in his back.
• The emergency room physician noted that the police narrative "does not add up."
• An independent autopsy commissioned by Greene's family revealed severe head injuries and multiple facial wounds.
  
  

Systematic obstruction 

The case was marked by evidence manipulation:

• Troopers deliberately withheld body camera footage for two years.
• Lieutenant John Clary falsely claimed no video existed, later discovered to have 30 minutes of footage.
• Official statements about Greene's arrest were directly contradicted by video evidence.
  
  

George Floyd medical privacy breach

The aftermath of George Floyd's death in police custody exposed a vulnerability in medical record protection.

Unauthorized record access

• Multiple employees at a Minneapolis healthcare system improperly accessed Floyd's medical records.
• The healthcare system confirmed that those involved were terminated.
  
  

Broader implications 

This breach highlighted concerns about:

• Patient privacy in high-profile cases
• Potential misuse of medical information
• The need for stringent access controls in sensitive investigations
  
  

Lessons learned

These cases show the importance of:

• Independent medical documentation
• Strict protocols for medical record access
• Oversight mechanisms
• Transparent investigation processes

Medical records are not just clinical documents—they are potential keys to uncovering truth and ensuring accountability.

Recommendations for best practices

• Independent oversight: Implementing independent review of record requests in potential misconduct cases.
• Standardized documentation: Developing uniform standards for documenting injuries potentially resulting from excessive force.
• Clear access protocols: Establishing clear protocols governing who can request records and under what circumstances.
• Transparency requirements: Creating requirements for documenting and disclosing how medical information influenced investigations.
• Training improvements: Training for both healthcare providers and law enforcement about appropriate handling of medical evidence.

FAQs

Can police access medical records without a patient’s consent?

Yes, under HIPAA, police can obtain medical records without patient consent under specific conditions, such as court-ordered subpoenas, warrants, or administrative requests that meet the "three-part test."

What is the "three-part test" for releasing medical records to law enforcement?

The test requires that the request be specific and limited in scope, relevant to a legitimate law enforcement inquiry, and that de-identified information could not serve the same purpose.

Do hospitals have the right to refuse law enforcement requests for medical records?

Yes, hospitals are not required to release records if they determine that the legal requirements, such as the "three-part test," have not been met.

Are there standardized hospital procedures for documenting injuries from police use of force?

No, studies indicate variation in how hospitals document injuries, with only a small percentage having specific guidelines for excessive force cases.

How do hospitals ensure the confidentiality of medical records in police brutality cases?

Hospitals must follow HIPAA guidelines and establish protocols to prevent unauthorized access and misuse of medical records, especially in sensitive cases.