Question

You are the head of the Health Information Management department at Grady Health System. An FBI agent has arrived at your office with a search warrant in hand. He asks to speak with you about the hospitals health records and HIPAA violations. You start your response with some examples of HIPAA violations. What would you say? Provide a reference to support your thoughts.

Answer 1

I would initially apologize for the violations that are found in the hospital. Although this might not necessarily be my jurisdiction, I would still feel bad if the hospital did not operate as it should.

I would then proceed to name some examples of HIPAA violations. This would be:

• Snooping on Healthcare Records
• Failure to Perform an Organization-Wide Risk Analysis.
• Failure to Manage Security Risks / Lack of a Risk Management Process
• Insufficient ePHI Access Controls