25% off all training courses Offer ends May 29, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends May 29, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

PHI Falls from Sky at Soccer Parade

The U.S. Women’s World Cup Soccer champions toured NYC celebrating their historic win, and were treated to a shower of confetti, some of which appeared to be made from medical prescription records.

One local resident noticed the confetti contained writing and upon closer inspection, realized it was Protected Health Information. The confetti was photographed and uploaded to twitter, with the story being picked up by 12WMAZ.

According to the finder, the data included the patient’s name, treating physician and the address of the location where the prescription was provided; information covered by the Health Insurance Portability and Accountability Act. HIPAA requires all holders of PHI to follow strict rules governing the disposal of PHI. All data must be destroyed and rendered unreadable and undecipherable before disposal.

Each year confetti is purchased for the Thanksgiving Day parade, with the official contract given to Atlas Packaging Company this year. An order was placed for confetti made from strip-cut, blank news roll. Two tons of confetti was ordered, delivered and handed out to local residents. Someone, somewhere potentially violated HIPAA Rules, although who that was may remain a mystery.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

According to a recent report on 12WMAZ, the Downtown Alliance – which was managing the parade – purchased two tons of confetti for the 2012 Thanksgiving parade, yet collected 34 tons during the cleanup. A considerable amount of rogue confetti is therefore getting into the county supply.

The official line appears to be that local residents and businesses have been making their own, and have not been too careful about where the paper was sourced.

This is not the first time PHI has fallen from the sky in NYC. Social Security numbers medical records were discovered on ticker tape dropped in NYC during the 2012 Super Bowl, and ticker tape was also found that had been made from Police Department records.

Author: Steve Alder is the editor-in-chief of The HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist