HIPAA and Records
What If X-Ray Films Are Thrown Away by Mistake?
Report X-ray films thrown away by mistake to your privacy contact immediately. Stop further disposal, protect any files still present, and let the responsible team assess what was exposed and what action is required.
Stop the mistake from continuing
Tell the staff involved to pause the cleanout. If other files are waiting nearby, leave them in controlled storage while the incident is reviewed.
Alert the privacy contact and the person responsible for the archive. Give the location and time without circulating patient names through a broad staff message.
Find out where the films went
Establish whether the files are still on the premises, in a container, or already collected. Ask the responsible manager to coordinate any safe recovery with the people controlling that area.
A returned box does not automatically settle the privacy question. The review still needs to consider whether someone outside the authorized group could have seen or kept the information.
Record facts while they are fresh
Write down what was discarded, the estimated quantity, when it happened, and how the mistake was discovered. Record who handled the files and any steps taken to protect or recover them.
Separate confirmed details from things that remain unknown. A clear account is more useful than assuming nobody looked at a box because no one reported seeing it.
Let the privacy team assess reporting
An improper disclosure is generally presumed to be a breach unless an applicable exception or documented assessment supports a different conclusion. The review considers the information, who received it, whether it was viewed, and steps that reduced the risk.
Your privacy team should decide which notices are required and when they must be sent. Staff should report promptly rather than waiting to determine the legal outcome themselves.
Fix the step that caused the error
Review how the films were mistaken for ordinary waste. Clear archive approvals, a named collection contact, and a brief staff reminder can prevent the same mix-up during the next cleanout.
For planned collections, California Film Recycling boxes and removes approved facility files and securely destroys patient information with a Certificate of Destruction. Call 951-822-6298 to arrange that service once any incident review allows the affected records to be released.
Quick questions
Should staff report a mistake if the films were recovered?
Yes. Recovery is useful information, but the privacy contact still needs to review what happened.
Does every disposal mistake require the same notices?
No. Notification decisions depend on the facts, the applicable rules, and the documented assessment.
Should we destroy recovered files immediately?
Wait for the responsible team to approve further handling. The files may be needed for the incident review or patient care.