Health Information Compliance Alert
Facility Pays $865,500 Fine After Staffers Peeked at Patient Health Records
You don't need celebrity patients to learn from this HIPAA mistake. If you knew Brad Pitt was getting medical treatment at your location, would you peek at his files? How about your ex-husband's new wife? Or your estranged sister? No matter whose records you're reviewing, it's illegal to take that peek unless you have a medically necessary reason to be doing so. That was a very expensive lesson that the University of California at Los Angeles Health System (UCLAHS) learned recently after agreeing to settle potential violations of the HIPAA rule for $865,500. At issue: When two celebrity patients received care at the hospital, staff members at the facility "repeatedly and without permissible reason" looked at the patients' electronic PHI. After the celebrities complained, it was revealed that between 2005 and 2008, "unauthorized employees repeatedly looked at the electronic protected health information of numerous other UCLAHS patients," a July 7 news release notes. Not only will the hospital face the steep fine, but it must also implement a corrective action plan to fix gaps in its HIPAA compliance routine. The lowdown: Not only is it illegal to review a patient's PHI without having a justifiable and medically necessary reason, but medical practice owners can't simply turn a blind eye if their staff members are doing so. "Covered entities are responsible for the actions of their employees," said Office of Civil Rights director Georgina Verdugo in the statement. "Employees must clearly understand that casual review for personal interest of patients' protected health information is unacceptable and against the law." Verdugo also stressed that the OCR is always alert to HIPAA violations. "Covered entities need to realize that HIPAA privacy protections are real and OCR vigorously enforces those protections," she noted. "Entities will be held accountable for employees who access protected health information to satisfy their own personal curiosity." To read more about the UCLAHS fine, visit www.hhs.gov/news/press/2011pres/07/20110707a.html.
Health Information Compliance Alert
- Securing PHI:
How Secure Are Your Data Management Practices?
Encryption holds the key says expert. You're risking substantial security breaches unless you can answer [...] - HIPAA Compliance:
Physician Faces up to 5 Years in Prison for Sharing Medical Information With Patient's Employer
Here's how you can avoid facing a similar fate. HIPAA enforcement is still going full-throttle, [...] - 5010 Readiness:
Vendors Won't Be Able to Fix This Potential 5010 Snafu, Experts Say
Check on your address fields now -- before mistakes on your claim forms threaten to halt [...] - Patient Privacy:
Have Patient Data? You Can Still Travel Safely
Just make sure you maintain your HIPAA compliance on the road. Protecting your clients' private [...] - Patient Privacy:
Focus On Your Laptop's Physical Security
You can minimize the risk of people inadvertently seeing protected health information on your laptop [...] - HIPAA:
Facility Pays $865,500 Fine After Staffers Peeked at Patient Health Records
You don't need celebrity patients to learn from this HIPAA mistake. If you knew Brad [...] - Home Health Compliance:
Follow These 5 Steps To Protect Against F2F Claims Denials
Are you doing everything you can to boost your face-to-face compliance? It's no longer just [...] - Industry Notes:
Physician Nailed for Role in $200 Million Medicare Fraud Scheme
Medicare wants physicians' signatures on their charts -- but only if they're signing off on work [...]
