This is probably old news for many on the boards, as it has been circulating since the weekend. On the 4th, it seems that Jason Pierre Paul was injured by a firework and received burns on his hands. Yesterday, a cell phone picture of his medical record was leaked on twitter which showed that he was having a surgery to amputate his right index finger. It’s being reported that a hospital employee took the image and sent it to a friend, who posted it on twitter. Because of this whole episode, the Giants rescinded a $60 million offer that they had given JPP.
So, since HIPAA (please don’t comment below saying HIPPA) law was clearly violated, I’m very interested in continuing to follow this. I work quite a bit with HIPAA law, and it’s just nauseating that a hospital employee could be that stupid and cavalier with medical data. He may end up in jail, and he deserves to. As for the hospital, HIPAA fines from the OCR have been in the multi-million dollar range. That is typically due to a high volume data breach. I’m curious to find if a civil suit could come up to that range based off of one person losing several million dollars in contract money.
Let me stop any arguments to the contrary before they are started. Even if JPP has an agreement in place with the NFL and waives his HIPAA rights, the nature of the data breach means that HIPAA law was broken. This wasn’t the NFL releasing the data, it was some slack jawed nurse, or IT guy, or facilities person.
ON TOP OF ALL THAT – JPP may face criminal charges because fireworks are illegal in Florida. The convolution runs deep in this story.
TLDR – Jason Pierre Paul blew off his finger with firework. He may face criminal charges, but only because a hospital employee broke the law first and released his medical issue. The Giants said “We good” and rescinded his offer. Now there is HIPAA blowback on ESPN and the hospital for letting this come to light. It’s only appropriate that this happened in Florida.