Header graphic for print
HIPAA, HITECH & HIT Legal Issues, Developments and Other Pertinent Information Relating To The Creation, Use and Exchange of Electronic Health Records

Tag Archives: Enforcement

Another Case of Snooping Prosecuted

Posted in HIPAA Enforcement

Once again, a healthcare worker’s inability to resist the temptation to snoop in her employer’s medical records has resulted in criminal prosecution. In the latest incident, a Vermont ultrasound technologist improperly accessed the electronic medical records of her husband’s former wife and her children, allegedly over a period of 12 years. The victim, also employed by the… Continue Reading

Rite Aid settles HIPAA Claims for $1 Million

Posted in HIPAA Enforcement

In a press release dated July 27, 2010, the Department of Health and Human Services announced a settlment under which Rite Aid Corporation and its affiliates have agreed to pay $1 million to settle potential HIPAA violations.   The pharmacy chain also entered into a consent order with the Federal Trade Commission. HHS reports that the… Continue Reading

California Hospitals Fined for Employees’ Unauthorized Access of Patient Records

Posted in Privacy & Security

The more famous the patient, the greater the temptation to peek at his or her medical records. This is why California enacted health privacy legislation in 2008. Among the latest providers to be fined by the state is Ronald Reagan UCLA Medical Center in Los Angeles,  reportedly as a result of two employees’ unauthorized access of Michael Jackson’s medical… Continue Reading

Snoop Through Records, Go Directly To Jail

Posted in Articles

A former researcher at UCLA has the dubious distinction of being the first person sentenced to prison under HIPAA for snooping through medical records. The Justice Department press release reports that the researcher, Huping Zhou, who admitted to illegally reading private and confidential medical records, mostly from celebrities and other high-profile patients, was sentenced to… Continue Reading

HHS Issues Interim Final Rule to Implement the HITECH Act’s Strengthened Civil Money Penalty Scheme

Posted in HITECH Act

On October 30, 2009, the Secretary of the HHS adopted an Interim Final Rule amending HIPAA’s enforcement regulations relating to the imposition of civil monetary penalties (“CMP”). Most significantly, the Interim Final Rule distinguishes between violations occurring before February 18, 2009 and violations occurring on or after that date with regard to the penalty amount… Continue Reading