West Virginia Clinical Photography Privacy Laws: A Practical Guide

Kevin Henry

Data Privacy

Published Updated

9 minutes read
Share this article
West Virginia Clinical Photography Privacy Laws: A Practical Guide

Photographs taken during care can support diagnosis, document injuries, and preserve evidence—but they also contain highly sensitive information. In West Virginia, the rules depend on who takes the photographs and why. Sexual assault medical forensic examination photographs have specific state requirements, while first-responder emergency medical photography is addressed by a separate statute.

This guide summarizes the key requirements and practical safeguards. It is general information, not legal advice; providers and agencies should follow current law and their own written policies.

For photographs taken during a sexual assault medical forensic examination, West Virginia’s Rule 149-11 permits photo documentation “with permission” of the patient. The rule says photos may supplement the medical forensic history and written findings, but do not replace written documentation. See the West Virginia Secretary of State’s current Rule 149-11.

The state’s West Virginia medical response protocol describes consent to take photographs as a distinct part of informed consent for the examination. It calls for verbal and written consent for the medical forensic examination and emphasizes that consent is ongoing: a patient may decline a photograph, test, or further interaction even after signing a form. In practice, obtain and document specific written patient consent for photography rather than assuming consent to an examination also covers images.

Consent to take a photograph is not the same as consent to release it. The West Virginia protocol separately identifies written authorization to release information and evidence to law enforcement. A patient may receive a forensic examination without agreeing to participate in the criminal justice system, as provided by West Virginia Code § 61-8B-16.

For clinical photographs outside a sexual assault forensic examination, do not assume that a broad consent form or the fact that photography may be useful gives blanket permission to take or share images. Follow the facility’s informed-consent, privacy, and photography policies, with particular care for intimate images and patients who cannot make or communicate decisions. The specific Rule 149-11 photography requirements apply to sexual assault medical forensic examinations.

How must forensic photographs be stored and protected?

For photographs taken during a sexual assault medical forensic examination, Rule 149-11 requires confidential handling and secure storage and backups in the original image file format, in accordance with written facility protocol. This is a specific state requirement—not simply a general recommendation.

A secure backup protocol should identify approved cameras and transfer methods, limit access to authorized personnel, and document who accesses or transfers files. Preserve the original image and its metadata; if an image must be cropped, enhanced, or redacted for a particular purpose, retain the original and document work on a separate copy. Avoid personal devices, ordinary messaging apps, and unsecured storage locations.

For electronic protected health information, HIPAA’s Security Rule requires safeguards such as access controls, audit controls, integrity protections, authentication, and transmission security. See 45 C.F.R. § 164.312. These safeguards support secure handling; they do not replace West Virginia’s more specific requirement to store forensic photo documentation securely in its original file format under written facility protocol.

West Virginia Rule 149-11 allows sexual assault forensic photo documentation to be used for peer review, an expert second opinion, a criminal proceeding against a person accused of a sexual offense, a juvenile delinquency proceeding, or an abuse and neglect investigation. Any dissemination must comply with state and federal law. Photographs supplement—rather than replace—written descriptions and body diagrams.

Authorization to take a photograph does not automatically authorize every later disclosure. For a HIPAA-covered provider, photographs maintained as part of the patient’s record may be protected health information. Disclosure generally requires patient authorization unless a specific legal permission or requirement applies. HIPAA allows certain law-enforcement disclosures under defined conditions, and a court order permits disclosure only of the information it expressly authorizes. A subpoena or other legal process is not automatically the same as a court order; the provider must apply the relevant Privacy Rule requirements. See HHS guidance on HIPAA disclosures to law enforcement and HHS guidance on court orders and subpoenas.

Rule 149-11 permits specified uses of sexual assault forensic photographs, but it does not guarantee that a particular image will be admitted into evidence or determine how a court will weigh it. Maintain the original, document how the image was created and handled, and route requests for disclosure through the facility’s privacy and legal processes.

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Get Started Free Today

When may first responders photograph a patient receiving emergency care?

West Virginia’s Jonathan’s Law applies to first responders, including law-enforcement officers, firefighters, and emergency medical services personnel. At a motor vehicle accident or other emergency, a first responder present to provide public safety services or medical care or assistance may not photograph or otherwise record the image of a person receiving care unless the image is made for a listed purpose: a legitimate law-enforcement, public-safety, health-care, insurance, or legal-investigation or legal-proceeding purpose involving the injured or deceased person, or pursuant to a court order.

The statute’s listed purposes are limits on when first responders may capture images; the fact that a scene is in public or that a responder has a camera does not itself authorize photography. This first-responder emergency medical photography rule is separate from the consent and documentation requirements for photographs taken by clinical staff during a forensic examination. Read West Virginia Code § 61-8-30.

What rules govern disclosure of first-responder photographs?

Jonathan’s Law separately restricts disclosure. A first responder may not knowingly disclose a photograph of a person receiving care at an emergency scene without prior written consent from the injured person. If that person cannot consent, the statute identifies the person’s next of kin; for a deceased person, it identifies the personal representative under law.

The statute provides exceptions for disclosure for a legitimate law-enforcement, public-safety, health-care, insurance, or legal-investigation or legal-proceeding purpose involving the injured or deceased person, or pursuant to a court order. Those exceptions do not authorize unrelated sharing, such as posting an image online or circulating it for personal interest. The law also establishes misdemeanor penalties for violations. See West Virginia Code § 61-8-30.

When a hospital or other HIPAA-covered provider holds the image, the provider must separately assess whether HIPAA permits the proposed disclosure. The state law governing a first responder’s image and HIPAA’s rules for a provider’s protected health information are related privacy protections, but they are not interchangeable.

How can patients request copies of clinical photography records?

Start with the health care provider’s medical records or health information management department. Make a written request that identifies the dates of care and specifically asks for the clinical photographs, related documentation, and any available electronic copies. If you need the original image file format, say so and ask whether the provider maintains and can provide the images in that format.

Under West Virginia Code § 16-29-1, a licensed, certified, or registered health care provider generally must furnish requested copies of all or part of a patient’s record within 30 days after receiving a written request. The statute provides for paper copies and, when requested and available under the provider’s routine electronic record practices, electronic formats. It also addresses records when a patient is still receiving treatment, so ask the provider how that provision applies to your request.

HIPAA generally gives individuals access to health information about them in a covered provider’s designated record set, which can include medical records and other information used to make decisions about the individual. Some limited exceptions apply, including certain information compiled in reasonable anticipation of or for use in a legal proceeding. See HHS guidance on the HIPAA right of access.

If the photographs are held by law enforcement or another agency rather than the health care provider, a medical-records request may not reach them; ask the agency that maintains the images about its records-request process. For health care records access, be specific about which images you want and contact the records custodian if the provider denies or limits the request.

In short, get specific permission for sexual assault forensic photography, protect images in their original format under written facility procedures, and treat capture and disclosure as separate decisions. First responders face distinct limits under Jonathan’s Law, while patients can request clinical photography records through the provider’s written-records process.

FAQs

Can forensic photographs be taken without a patient’s permission?

For sexual assault medical forensic examination photographs, West Virginia Rule 149-11 permits photo documentation with the patient’s permission, and the state protocol identifies consent to take photographs as a separate part of informed consent. For first responders, Jonathan’s Law permits emergency-scene photography only for specified purposes or pursuant to a court order; it does not create general permission to photograph patients.

How should forensic photographs be stored?

West Virginia requires sexual assault medical forensic photographs to be handled confidentially and stored and backed up securely in their original file format according to written facility protocol. Limit access, use approved secure systems, and preserve the original file and its metadata.

Can forensic photographs be used in criminal proceedings?

Yes. West Virginia Rule 149-11 permits sexual assault forensic photographs to be used in a criminal proceeding against a person accused of a sexual offense, subject to state and federal law. That permission does not guarantee admissibility; disclosure and use must still comply with applicable privacy, legal-process, and evidentiary requirements.

How can a patient request copies of clinical photographs?

Send a written request to the provider’s medical records department and identify the photographs and dates of care. West Virginia law generally requires a provider to furnish requested copies of all or part of a patient’s record within 30 days. Specify whether you want electronic images and ask whether the original image file format is available.

Share this article

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Get Started Free Today

Related Articles