There are multiple issues here. The fact the high school kids knew the deceased is an example of why certain information is confidential, but the same standards of confidentiality would exist regardless.
For example, I use coded identifiers on HIV tests I perform because there is always the chance someone I am testing has a neighbor who works in the lab. And if it is a medical worker I am testing, there is a chance the lab worker might know the person because they both work in the same hospital.
You can't really apply the rules the apply to HIV confidentiality to health care as a whole. HIV is a specially protected category that requires more confidentiality than other diagnoses. I don't know what the rules are because I don't work in HIV care, but I know they are different.
I work at a cancer hospital, and people's records are identified by name, not a coded number alone. Any person who even comes across the patient's chart, lab work, pathology, etc by happenstance, even if they do not need to see it, will be able to see the patient has for example sarcoma, and who they are, because it is clearly labeled with their name and DOB. Also, our administration people work off of computer work lists which lists huge numbers of patients with their diagnoses. ANYONE who has access to our computer systems can see this information, and does, whether they are looking for it or not, because when you pull up a work list, it lists ALL the patients being seen in the various clinic. As clinics are identified by the diagnosis they treat (leukemia clinic, melanoma clinic, etc) you will automatically know your patient's diagnosis just by what clinic they are scheduled for. People typically work by alpha split. So if your job is to get referrals, you'll work last names A-D. But the work list you print out will list ALL patients with pending referrals, even those outside your alpha split which you won't be touching personally.
We work at one of the top hospitals in the world, and they are very concerned with being HIPPA compliant. But in our HIPPA training, what we were told is that we just can't share this information from outside people. Not that we have to keep the the patient's names hidden from any kind of documentation or specinmens in the hospital so that no one except people directly involved with the patient would know they exist.
So for example, once I was going through faxes in our office and I came across a fax sent to another employee, for a patient who I was not working with. This fax was an authorization from an insurance, and it clearly listed the patient's name, address, cancer diagnosis, etc. I recognized the patient's name as being a very close friend of my parents. It is not a HIPPA violation for me to have seen this piece of paper even though I personally am not working with this patient. It would only be a HIPPA violation if I had then called my parents or anyone else (who were aware of the patient's diagnosis), "Hey Mom and Dad, did you know so and so is being treated here at Dana Farber?"
I should also say that I have worked at several other hospitals, which are also top hospitals, we're talking some of the top ranked in the country, and have entire departments that exist to make sure we are HIPPA compliant...and I have never worked somewhere where patients' lab work, charts, or anything else was identified ONLY by their medical record number or a coding number. They have always been identified by name and date of birth, which is clearly labeled on the scans/slide/chart etc that can be seen by anyone in the hospital who is in that area and happens to catch a glance.
Now certainly, I can't LOOK in a patient's chart and go through their records if I have no legitimate professional reason to. But merely the fact that I saw the chart with the patient's name and DOB in the sarcoma clinic is enough to tell me this patient has sarcoma (or at the very least, has a history of or high risk of sarcoma). And if I were to see a labeled scan or specimen outside of a particular clinic, like in a lab, this may not reveal their exact diagnosis, but I know they are patient at our cancer hospital.
It sounds to me like you work in a very specified area (HIV) with very specified rules regarding the labeling of patient information and specimens with identifying information (such as their name), and are under the impression these rules apply universally in healthcare, but they don't.
Also, we have high school interns who come in and do a few hours a week in the summer. This also has been true at other major hospitals I have worked at. They are in the same situation as the rest of us - they are able to see patient information all the time, because they are constantly around charts and specimens and computer systems and other things which have people's names on them. They are just counseled beforehand, like the regular employees are, what the rules of HIPPA are and that they cannot share any information with anyone. They are not prevented from seeing patients' names and diagnoses just because they are 16 years old.
I also was a candy striper starting at age 13, and I volunteered in the surgical unit. Mostly they had me going through and organizing their charts and medical records. So at 13 years old, I had full access to a wide array of patient information. And in this case, I had to read some of their charts' specific information because my task was to organize their records. So not only did I know their names and diagnoses, I knew a lot of other personal stuff about this. I was counseled on HIPPA, as were all the other kids. No one ever prevented me from seeing patient information because I was a kid. Also, because I worked in a surgical unit, I got to see all sorts of specimens that were sent from the surgical department to the pathology lab. These were labeled with the patient's name and date of birth. Furthermore, this was in a small county hospital, so not only was it possible that I would come across someone I knew, it was likely, and it in fact did happen several times.
Though I don't know enough about this case to know if the teens in this particular instance were counseled on HIPPA.
I don't really understand why you seem to think that hospitals concern themselves with making sure no one at the hospital (including 13 year old candy stripers) ever finds out if someone they know is being or has been treated there. If you live in the same town/city as the hospital you work in, stuff like that happens all the time. You just can't go around then telling people, "Hey, guess who has this disease and is being treated at the hospital where I work?"
Again, my guess is that perhaps this works this way for *you* because you work with AIDS, which is a highly sensitive and specially protected diagnosis. But that's not the way healthcare works as a general rule. Specimens, charts, etc are typically labeled with name and date of birth, and are in places where they can be seen by plenty of people who do not actually work with the patient and need to know that information.