If you don’t have a good handle on what your employees are up to with your patient files, you could pay the price.
A licensed practical nurse at a large medical group in Virginia inappropriately accessed nearly 1,000 patients’ Social Security Numbers and medical histories from their electronic health records over a four-year period, the Hampton Roads, Va. Daily Press reports. The company discovered the breach during a random audit in November, after which the health system began contacting the patients who were affected.
This latest news should serve as a reminder of how important it is for you to create strict patient privacy policies, train your staff on how to follow them, and audit/monitor the records often to ensure that your employees are carefully following the HIPAA rules. To view the HIPAA audit protocols, visit www.hhs.gov/ocr/privacy/hipaa/enforcement/ audit/protocol.html.