Alabama Child Fatality Review Privacy Laws: What Child Advocacy Center (CAC) Medical Wings Need to Know

Overview of Alabama Child Death Review System

Alabama’s child death review model brings agencies together to examine the medical, social, and investigative factors surrounding a child’s death and to prevent future fatalities. For Child Advocacy Center (CAC) medical wings, the system clarifies when clinical information may be shared, how it must be safeguarded, and what documentation is required during multidisciplinary review.

The process is collaborative by design. A multidisciplinary review team analyzes each eligible case, identifies risk and protective factors, and issues prevention recommendations. Throughout, confidentiality duties attach to every participant, and only deidentified case summaries may be used for education or prevention planning.

This article is informational and focuses on privacy and process requirements. It does not constitute legal advice. Always confirm local protocols and consult counsel for case-specific questions.

Composition of Local Child Death Review Teams

Local teams are structured to ensure a complete view of each case. While membership may vary by county, a typical multidisciplinary review team includes:

• Medical examiner/coroner and forensic pathology representation
• Law enforcement and the district attorney’s office
• Public health officials
• Department of Human Resources/child protective services
• Emergency medical services and hospital representatives
• Pediatricians and CAC medical wings
• Mental and behavioral health professionals
• Education or school liaison when relevant

Before reviewing any file, members affirm confidentiality obligations and limit access to only those with a need to know. CAC clinicians contribute medical expertise, explain findings (e.g., injury patterns), and help differentiate accidental, natural, and maltreatment-related causes.

Confidentiality and Privacy Protocols

Statutory protections and team obligations

Under Alabama Code § 26-16-96, records and proceedings of child fatality reviews are confidential. They are protected from unauthorized disclosure, shielded from public release, and used only for prevention or quality improvement purposes. Team-generated materials—meeting notes, analyses, and recommendations—remain restricted, and any public-facing outputs must be limited to deidentified case summaries.

Access control and minimum necessary

Only designated representatives may access case information, and they must use the minimum necessary data to fulfill review duties. CAC medical wings should maintain role-based access, sign-in sheets, and secure storage for any materials brought to or created during meetings.

Safeguards that withstand scrutiny

• Obtain and archive written confidentiality statements for all attendees.
• Prohibit photography, audio recording, or removal of records from the meeting space.
• Securely collect and return or shred printed materials immediately after review.
• Document each protected health information disclosure with date, purpose, and legal authority.

Trauma-focused therapy confidentiality is paramount. Therapy notes and counseling records receive heightened protection; when sharing is permitted, disclose only the minimum necessary and avoid raw psychotherapy notes unless a clear legal basis exists.

HIPAA Compliance for CAC Medical Wings

When disclosure is permitted

HIPAA permits a covered health care provider to disclose PHI without patient authorization when a disclosure is required by law, for certain public health or health oversight activities, or to coroners and medical examiners. In child fatality reviews authorized by state law, CAC medical wings may provide the minimum necessary information to the team for review purposes as a permitted protected health information disclosure.

• Required by law: When Alabama statutes mandate sharing for review, HIPAA allows disclosure to comply with that requirement.
• Public health/health oversight: If the local team functions as an authorized oversight or prevention body, disclosures may fit these pathways.
• Coroners/medical examiners: PHI may be shared to identify a decedent, determine cause of death, or perform other official duties.

Decedent data and psychotherapy notes

PHI about a decedent remains protected. Disclosures to the medical examiner and other authorized officials are allowed for official duties, but psychotherapy notes hold special status. For trauma-focused therapy confidentiality, share only treatment information strictly necessary for the review and avoid notes that are specifically classified as psychotherapy notes absent a clear legal exception.

Operational safeguards for CACs

• Use a disclosure checklist that cites the statutory basis, purpose, and recipient for each transmission.
• Apply the minimum necessary standard and redact extraneous fields (e.g., unrelated visits or family history not relevant to the death).
• Transmit records via encrypted channels; maintain an accounting of disclosures.
• Clarify that the review team is not a business associate; do not execute a BAA unless a separate service arrangement exists.
• Train staff annually on fatality-review–specific workflows and breach response.

Reporting and Investigation Procedures

Immediate notifications and the child death reporting mandate

Upon a qualifying child death, prompt notification to appropriate authorities is required. The child death reporting mandate commonly involves health care providers, hospitals, law enforcement, the medical examiner/coroner, and child protective services when maltreatment is suspected. Local protocols specify who notifies whom and within what timeframe.

Medical examiner involvement and postmortem processes

• Postmortem examination authorization enables autopsy, evidence collection, and access to pertinent medical records.
• CAC clinicians should be prepared to summarize pre-mortem findings, imaging, labs, and consults relevant to the death analysis.
• Where abuse or neglect is suspected, coordinate with investigators to preserve chain of custody for clinical photographs and specimens.

Team review sequence

1. Case identification and eligibility confirmation.
2. Record collection from agencies with a need to know (medical, law enforcement, CPS, EMS, schools).
3. Confidential, closed-session multidisciplinary review.
4. Findings and prevention recommendations; documentation restricted to deidentified case summaries.
5. Quality improvement feedback to participating agencies, avoiding identifiable details.

Data Collection and Sharing Practices

Standardization and quality

Use a common case abstraction tool with defined data elements and a data dictionary. This reduces ambiguity and supports reliable analysis across counties and years.

Deidentification and limited data sets

• Release only deidentified case summaries for education or community prevention efforts.
• When identifiable elements are essential for analysis across systems, use a limited data set supported by a data use agreement that restricts reidentification and onward sharing.
• Apply consistent suppression rules for rare scenarios that could reidentify a child or family.

Security and retention

• Store records in secure repositories with role-based access, encryption at rest and in transit, and audit logging.
• Follow a written retention schedule; destroy data securely when the retention period ends.
• Document all requests, approvals, and transmissions related to case data.

Legal Framework Governing Child Fatality Reviews

Core state authority

Alabama Code § 26-16-96 anchors confidentiality for child fatality reviews, protecting review materials from disclosure and limiting use to prevention and quality improvement. Local team operations, composition, and duties align with related provisions governing multidisciplinary review and information sharing among participating agencies.

Federal privacy overlays

• HIPAA: Permits certain disclosures without authorization when required by law, for health oversight or public health purposes, and to coroners/medical examiners. Minimum necessary applies.
• FERPA: School records are generally protected; limited sharing may occur under a health or safety emergency or with appropriate consent or statutory authority.
• 42 CFR Part 2: Substance use disorder treatment records carry heightened protection; verify a specific legal basis or patient consent before any disclosure.

Immunity, open records, and proceedings

Participants act under statutory authority for prevention purposes. Review proceedings are closed, and materials are exempt from public disclosure to the extent provided by law. Underlying source records remain governed by the originating agency’s rules and are not altered by the review process.

Conclusion

• Share only what state law authorizes and HIPAA permits, always applying the minimum necessary rule.
• Use strict safeguards: confidentiality agreements, controlled access, encryption, and disciplined documentation.
• Communicate findings through deidentified case summaries and focus on prevention, not blame.
• Engage CAC medical wings early; their clinical insight is essential to accurate conclusions and system learning.

FAQs.

What information is confidential in Alabama child fatality reviews?

Review meetings, deliberations, and team-generated materials are confidential. Identifiers from medical, law enforcement, CPS, EMS, and school records remain protected, and public release is limited to deidentified case summaries. Under Alabama Code § 26-16-96, these safeguards restrict disclosure and confine use to prevention and quality improvement.

How does HIPAA apply to CAC medical wings during fatality reviews?

HIPAA allows a CAC to disclose PHI without authorization when a disclosure is required by law, for qualifying public health or health oversight activities, and to coroners/medical examiners. Apply the minimum necessary standard, document the legal basis for each protected health information disclosure, and avoid sharing psychotherapy notes from trauma-focused therapy unless a specific exception or valid authorization applies.

Who must report child deaths under Alabama law?

Local protocols typically require prompt notice from health care providers or hospitals, law enforcement, and the medical examiner/coroner. When maltreatment is suspected or a child was in state care, child protective services must also be notified. Timeframes and forms are set by county procedures and state guidance; follow the child death reporting mandate that applies in your jurisdiction.

What roles do CAC medical wings play in child fatality review processes?

CAC medical wings supply relevant medical records and clinical interpretations, explain injury mechanisms, highlight maltreatment indicators, and help reconcile medical findings with investigative facts. They support postmortem examination authorization processes, ensure secure data handling, and translate clinical insights into prevention-focused, deidentified recommendations for the multidisciplinary review team.