SlideShare a Scribd company logo
Record
Snooping
Lance King
Vice President, Sales
Healthcare Compliance Solutions
Phone (801) 947-0183
lking@hcsiinc.com
Record snooping
has been around
for a long time.
What
to
expect
Examples of Record Snooping
 UCLA Hospitals
 Carilion Clinic
 Allina Hospitals and Clinics
 University of Iowa Health Centers
 Everett Clinic
Levels of Sanctions for Record Snooping
 Level 1 - Accidental
 Level 2 - Intentional
 Level 3 - Harmful
Ways to Prevent Record Snooping
Conclusions on Record Snooping
What Is
Record Snooping?
Problems with
Record Snooping
Examples of Record Snooping
UCLA Hospitals
Paid $865,500
settlement
Hired
Record
Snooping
32 Fired
Everett Clinic
Fired 13 staff members and physicians
Level 1
Accidental Breach
1 Level
Warning and Retraining
Level 2
Intentional Breach
2 Level
Warning, Retraining,
and Possible Suspension
Level 3
Harmful Breach
3 Level
Employment Termination
Ways To Prevent
Record Snooping
“I was just curious . . .”
Ways To Prevent Record Snooping
Lance King
Vice President, Sales
Healthcare Compliance Solutions
Phone (801) 947-0183
lking@hcsiinc.com
Thank
You

More Related Content

Viewers also liked

Education And Outsourcing in the Philippines
Education And Outsourcing in the PhilippinesEducation And Outsourcing in the Philippines
Education And Outsourcing in the Philippines
Binary Ideas Mobile Marketing
 
Romans 12.16 teaching slides
Romans 12.16 teaching slidesRomans 12.16 teaching slides
Romans 12.16 teaching slides
Calvary Chapel Living Hope
 
Sean Leigh Digital Portfolio
Sean Leigh Digital PortfolioSean Leigh Digital Portfolio
Sean Leigh Digital PortfolioSean Leigh
 
Track ID Quiz
Track ID QuizTrack ID Quiz
Track ID Quiz
kvanbooven
 
Helping Children Change
Helping Children ChangeHelping Children Change
Helping Children Change
Calvary Chapel Living Hope
 
Excel 2007 create a chart
Excel 2007    create a chartExcel 2007    create a chart
Excel 2007 create a chartrezaulslide
 
2015 lid conference_rainwater harvesting piza
2015 lid conference_rainwater harvesting piza2015 lid conference_rainwater harvesting piza
2015 lid conference_rainwater harvesting pizaOptiRTC, Inc.
 
Volunteer Awards Banquet 2016
Volunteer Awards Banquet 2016Volunteer Awards Banquet 2016
Volunteer Awards Banquet 2016
kvanbooven
 

Viewers also liked (9)

Education And Outsourcing in the Philippines
Education And Outsourcing in the PhilippinesEducation And Outsourcing in the Philippines
Education And Outsourcing in the Philippines
 
Romans 12.16 teaching slides
Romans 12.16 teaching slidesRomans 12.16 teaching slides
Romans 12.16 teaching slides
 
Sean Leigh Digital Portfolio
Sean Leigh Digital PortfolioSean Leigh Digital Portfolio
Sean Leigh Digital Portfolio
 
Track ID Quiz
Track ID QuizTrack ID Quiz
Track ID Quiz
 
Helping Children Change
Helping Children ChangeHelping Children Change
Helping Children Change
 
Excel 2007 create a chart
Excel 2007    create a chartExcel 2007    create a chart
Excel 2007 create a chart
 
2015 lid conference_rainwater harvesting piza
2015 lid conference_rainwater harvesting piza2015 lid conference_rainwater harvesting piza
2015 lid conference_rainwater harvesting piza
 
Volunteer Awards Banquet 2016
Volunteer Awards Banquet 2016Volunteer Awards Banquet 2016
Volunteer Awards Banquet 2016
 
PDAPaper
PDAPaperPDAPaper
PDAPaper
 

Recently uploaded

Medical Technology Tackles New Health Care Demand - Research Report - March 2...
Medical Technology Tackles New Health Care Demand - Research Report - March 2...Medical Technology Tackles New Health Care Demand - Research Report - March 2...
Medical Technology Tackles New Health Care Demand - Research Report - March 2...
pchutichetpong
 
Dimensions of Healthcare Quality
Dimensions of Healthcare QualityDimensions of Healthcare Quality
Dimensions of Healthcare Quality
Naeemshahzad51
 
Demystifying-Gene-Editing-The-Promise-and-Peril-of-CRISPR.pdf
Demystifying-Gene-Editing-The-Promise-and-Peril-of-CRISPR.pdfDemystifying-Gene-Editing-The-Promise-and-Peril-of-CRISPR.pdf
Demystifying-Gene-Editing-The-Promise-and-Peril-of-CRISPR.pdf
SasikiranMarri
 
HEAT WAVE presented by priya bhojwani..pptx
HEAT WAVE presented by priya bhojwani..pptxHEAT WAVE presented by priya bhojwani..pptx
HEAT WAVE presented by priya bhojwani..pptx
priyabhojwani1200
 
CANCER CANCER CANCER CANCER CANCER CANCER
CANCER  CANCER  CANCER  CANCER  CANCER CANCERCANCER  CANCER  CANCER  CANCER  CANCER CANCER
CANCER CANCER CANCER CANCER CANCER CANCER
KRISTELLEGAMBOA2
 
CHAPTER 1 SEMESTER V - ROLE OF PEADIATRIC NURSE.pdf
CHAPTER 1 SEMESTER V - ROLE OF PEADIATRIC NURSE.pdfCHAPTER 1 SEMESTER V - ROLE OF PEADIATRIC NURSE.pdf
CHAPTER 1 SEMESTER V - ROLE OF PEADIATRIC NURSE.pdf
Sachin Sharma
 
Essential Metrics for Palliative Care Management
Essential Metrics for Palliative Care ManagementEssential Metrics for Palliative Care Management
Essential Metrics for Palliative Care Management
Care Coordinations
 
Navigating Healthcare with Telemedicine
Navigating Healthcare with  TelemedicineNavigating Healthcare with  Telemedicine
Navigating Healthcare with Telemedicine
Iris Thiele Isip-Tan
 
VVIP Dehradun Girls 9719300533 Heat-bake { Dehradun } Genteel ℂall Serviℂe By...
VVIP Dehradun Girls 9719300533 Heat-bake { Dehradun } Genteel ℂall Serviℂe By...VVIP Dehradun Girls 9719300533 Heat-bake { Dehradun } Genteel ℂall Serviℂe By...
VVIP Dehradun Girls 9719300533 Heat-bake { Dehradun } Genteel ℂall Serviℂe By...
rajkumar669520
 
India Clinical Trials Market: Industry Size and Growth Trends [2030] Analyzed...
India Clinical Trials Market: Industry Size and Growth Trends [2030] Analyzed...India Clinical Trials Market: Industry Size and Growth Trends [2030] Analyzed...
India Clinical Trials Market: Industry Size and Growth Trends [2030] Analyzed...
Kumar Satyam
 
Neuro Saphirex Cranial Brochure
Neuro Saphirex Cranial BrochureNeuro Saphirex Cranial Brochure
Neuro Saphirex Cranial Brochure
RXOOM Healthcare Pvt. Ltd. ​
 
The Importance of Community Nursing Care.pdf
The Importance of Community Nursing Care.pdfThe Importance of Community Nursing Care.pdf
The Importance of Community Nursing Care.pdf
AD Healthcare
 
Contact ME {89011**83002} Haridwar ℂall Girls By Full Service Call Girl In Ha...
Contact ME {89011**83002} Haridwar ℂall Girls By Full Service Call Girl In Ha...Contact ME {89011**83002} Haridwar ℂall Girls By Full Service Call Girl In Ha...
Contact ME {89011**83002} Haridwar ℂall Girls By Full Service Call Girl In Ha...
ranishasharma67
 
GLOBAL WARMING BY PRIYA BHOJWANI @..pptx
GLOBAL WARMING BY PRIYA BHOJWANI @..pptxGLOBAL WARMING BY PRIYA BHOJWANI @..pptx
GLOBAL WARMING BY PRIYA BHOJWANI @..pptx
priyabhojwani1200
 
CHAPTER 1 SEMESTER V PREVENTIVE-PEDIATRICS.pdf
CHAPTER 1 SEMESTER V PREVENTIVE-PEDIATRICS.pdfCHAPTER 1 SEMESTER V PREVENTIVE-PEDIATRICS.pdf
CHAPTER 1 SEMESTER V PREVENTIVE-PEDIATRICS.pdf
Sachin Sharma
 
.Metabolic.disordersYYSSSFFSSSSSSSSSSDDD
.Metabolic.disordersYYSSSFFSSSSSSSSSSDDD.Metabolic.disordersYYSSSFFSSSSSSSSSSDDD
.Metabolic.disordersYYSSSFFSSSSSSSSSSDDD
samahesh1
 
ventilator, child on ventilator, newborn
ventilator, child on ventilator, newbornventilator, child on ventilator, newborn
ventilator, child on ventilator, newborn
Pooja Rani
 
Navigating Women's Health: Understanding Prenatal Care and Beyond
Navigating Women's Health: Understanding Prenatal Care and BeyondNavigating Women's Health: Understanding Prenatal Care and Beyond
Navigating Women's Health: Understanding Prenatal Care and Beyond
Aboud Health Group
 
Introduction to Forensic Pathology course
Introduction to Forensic Pathology courseIntroduction to Forensic Pathology course
Introduction to Forensic Pathology course
fprxsqvnz5
 
Deep Leg Vein Thrombosis (DVT): Meaning, Causes, Symptoms, Treatment, and Mor...
Deep Leg Vein Thrombosis (DVT): Meaning, Causes, Symptoms, Treatment, and Mor...Deep Leg Vein Thrombosis (DVT): Meaning, Causes, Symptoms, Treatment, and Mor...
Deep Leg Vein Thrombosis (DVT): Meaning, Causes, Symptoms, Treatment, and Mor...
The Lifesciences Magazine
 

Recently uploaded (20)

Medical Technology Tackles New Health Care Demand - Research Report - March 2...
Medical Technology Tackles New Health Care Demand - Research Report - March 2...Medical Technology Tackles New Health Care Demand - Research Report - March 2...
Medical Technology Tackles New Health Care Demand - Research Report - March 2...
 
Dimensions of Healthcare Quality
Dimensions of Healthcare QualityDimensions of Healthcare Quality
Dimensions of Healthcare Quality
 
Demystifying-Gene-Editing-The-Promise-and-Peril-of-CRISPR.pdf
Demystifying-Gene-Editing-The-Promise-and-Peril-of-CRISPR.pdfDemystifying-Gene-Editing-The-Promise-and-Peril-of-CRISPR.pdf
Demystifying-Gene-Editing-The-Promise-and-Peril-of-CRISPR.pdf
 
HEAT WAVE presented by priya bhojwani..pptx
HEAT WAVE presented by priya bhojwani..pptxHEAT WAVE presented by priya bhojwani..pptx
HEAT WAVE presented by priya bhojwani..pptx
 
CANCER CANCER CANCER CANCER CANCER CANCER
CANCER  CANCER  CANCER  CANCER  CANCER CANCERCANCER  CANCER  CANCER  CANCER  CANCER CANCER
CANCER CANCER CANCER CANCER CANCER CANCER
 
CHAPTER 1 SEMESTER V - ROLE OF PEADIATRIC NURSE.pdf
CHAPTER 1 SEMESTER V - ROLE OF PEADIATRIC NURSE.pdfCHAPTER 1 SEMESTER V - ROLE OF PEADIATRIC NURSE.pdf
CHAPTER 1 SEMESTER V - ROLE OF PEADIATRIC NURSE.pdf
 
Essential Metrics for Palliative Care Management
Essential Metrics for Palliative Care ManagementEssential Metrics for Palliative Care Management
Essential Metrics for Palliative Care Management
 
Navigating Healthcare with Telemedicine
Navigating Healthcare with  TelemedicineNavigating Healthcare with  Telemedicine
Navigating Healthcare with Telemedicine
 
VVIP Dehradun Girls 9719300533 Heat-bake { Dehradun } Genteel ℂall Serviℂe By...
VVIP Dehradun Girls 9719300533 Heat-bake { Dehradun } Genteel ℂall Serviℂe By...VVIP Dehradun Girls 9719300533 Heat-bake { Dehradun } Genteel ℂall Serviℂe By...
VVIP Dehradun Girls 9719300533 Heat-bake { Dehradun } Genteel ℂall Serviℂe By...
 
India Clinical Trials Market: Industry Size and Growth Trends [2030] Analyzed...
India Clinical Trials Market: Industry Size and Growth Trends [2030] Analyzed...India Clinical Trials Market: Industry Size and Growth Trends [2030] Analyzed...
India Clinical Trials Market: Industry Size and Growth Trends [2030] Analyzed...
 
Neuro Saphirex Cranial Brochure
Neuro Saphirex Cranial BrochureNeuro Saphirex Cranial Brochure
Neuro Saphirex Cranial Brochure
 
The Importance of Community Nursing Care.pdf
The Importance of Community Nursing Care.pdfThe Importance of Community Nursing Care.pdf
The Importance of Community Nursing Care.pdf
 
Contact ME {89011**83002} Haridwar ℂall Girls By Full Service Call Girl In Ha...
Contact ME {89011**83002} Haridwar ℂall Girls By Full Service Call Girl In Ha...Contact ME {89011**83002} Haridwar ℂall Girls By Full Service Call Girl In Ha...
Contact ME {89011**83002} Haridwar ℂall Girls By Full Service Call Girl In Ha...
 
GLOBAL WARMING BY PRIYA BHOJWANI @..pptx
GLOBAL WARMING BY PRIYA BHOJWANI @..pptxGLOBAL WARMING BY PRIYA BHOJWANI @..pptx
GLOBAL WARMING BY PRIYA BHOJWANI @..pptx
 
CHAPTER 1 SEMESTER V PREVENTIVE-PEDIATRICS.pdf
CHAPTER 1 SEMESTER V PREVENTIVE-PEDIATRICS.pdfCHAPTER 1 SEMESTER V PREVENTIVE-PEDIATRICS.pdf
CHAPTER 1 SEMESTER V PREVENTIVE-PEDIATRICS.pdf
 
.Metabolic.disordersYYSSSFFSSSSSSSSSSDDD
.Metabolic.disordersYYSSSFFSSSSSSSSSSDDD.Metabolic.disordersYYSSSFFSSSSSSSSSSDDD
.Metabolic.disordersYYSSSFFSSSSSSSSSSDDD
 
ventilator, child on ventilator, newborn
ventilator, child on ventilator, newbornventilator, child on ventilator, newborn
ventilator, child on ventilator, newborn
 
Navigating Women's Health: Understanding Prenatal Care and Beyond
Navigating Women's Health: Understanding Prenatal Care and BeyondNavigating Women's Health: Understanding Prenatal Care and Beyond
Navigating Women's Health: Understanding Prenatal Care and Beyond
 
Introduction to Forensic Pathology course
Introduction to Forensic Pathology courseIntroduction to Forensic Pathology course
Introduction to Forensic Pathology course
 
Deep Leg Vein Thrombosis (DVT): Meaning, Causes, Symptoms, Treatment, and Mor...
Deep Leg Vein Thrombosis (DVT): Meaning, Causes, Symptoms, Treatment, and Mor...Deep Leg Vein Thrombosis (DVT): Meaning, Causes, Symptoms, Treatment, and Mor...
Deep Leg Vein Thrombosis (DVT): Meaning, Causes, Symptoms, Treatment, and Mor...
 

Record Snooping: More common than you think

Editor's Notes

  1. Manage & Mitigate Risks
  2. Record snooping is an intrusive act that has been done by healthcare workers for a long time. However, with the HIPAA Privacy rules, there are now serious repercussions for the healthcare worker and the office they work for. The results of record snooping include the employee losing their job, public humiliation for the office involved, heavy monetary fines, and potential legal action. This intrusive act is a big problem for the employee involved and their employer.
  3. Record snooping is unauthorized access to a patients information. This type of privacy invasion happens when an employee accesses a patient’s health information without cause, but rather for their own personal or somebody else’s desire to have knowledge of that patients personal health information (PHI). We are all human, and as such, are naturally curious. Protecting the privacy of patient records is top priority as a health care provider, and that means both internally and externally.
  4. Violates patients privacy Is a HIPAA violation Causes public embarrassment for your practice Lowers public perceived confidence in your practice Can lead to large fines for your practice
  5. UCLA Health System has agreed to pay $865,500 as part of a settlement with federal regulators announced. Two celebrity patients alleged that hospital employees broke the law and reviewed their medical records without authorization.
  6. Carilion Clinic, in Roanoke Virginia, had to fire or discipline 14 employees for patient record snooping, which is common in many organizations. Fourteen employees were found to have accessed patient records without a legitimate patient-care need.
  7. Allina Hospitals and Clinics, a Minnesota health delivery system, the organization fired 32 employees for inappropriately looking at the electronic health records of patients involved in a mass drug overdose case.
  8. A student healthcare worker, Kathryn, was fired from the University of Iowa Health Center for violating the privacy of a pregnant female student, and her well-known student athlete boyfriend. For over 14 years, Kathryn had received HIPAA privacy training, but that didn’t stop her from revealing out loud to at least one nearby coworker that she hoped the young couple was happy with the positive results of the pregnancy test. Kathryn even went so far as to point out the student athlete to the clerk after she noticed him in the waiting room. She also inappropriately accessed the patient’s chart at least twice opening the records from past visits and medication records. The clerk then went and spoke with two medical assistants who treated the female student and asked about the couple’s reaction to the news of positive pregnancy test. The medical assistants then reported the inquiry to a manager as a possible privacy violation.
  9. Everett Clinic, in Everett Washington, uses Fair Warning software which red-flags unauthorized access to ePHI. Not long after they started using Fair Warning, 13 staff members and physicians were fired due to various incidents involving inappropriate access. Becky Hood, CIO of Everett Clinic says, “Our policy leans toward no-tolerance [of record snooping], but we’ll investigate each situation to determine if the incident was malicious, accidental or if a staff member didn’t understand [the rules],”.
  10. Consequences for record snooping can vary widely for different organizations. Some have a zero-tolerance policy. Some organizations institute a progressive system with the level of sanctions with the level of sanctions increasing for multiple violations or for particularly egregious violations. Sanction policy examples:
  11. Level 1 – Accidental Breach Possible scenarios: Employee does not log off computer after use. Employee faxed the wrong PHI to another practice. Employee emails PHI to the wrong email address. Sanction: Warning and retraining Verbal warning documented in the employee’s file and mandatory retraining for the first offense. Continued offenses lead to progressive discipline up to and including termination.
  12. Level 2 – Intentional Breach without Harmful or Dishonest Intentions Possible scenarios: Viewing patient records out of curiosity. Sharing PHI (any information that identifies the patient, including diagnosis or treatment, financial information, or photos) in personal communications or on social networks, because the information is interesting, not for treatment purposes.  Employee shares computer password. Discussing patient information in an unsecured area. Sanction: Written Warning & Re-Education, Possible Suspension Written warning documented in the employee’s file and mandatory re-education for the first offense. Continued offenses lead to progressive discipline up to and including suspension or termination.
  13. Level 3 - Willful or Intentional Breach with Harmful or Dishonest Intentions Possible scenarios: Using PHI for personal gain (marketing without authorization). Using PHI to cause harm (exposing information to unauthorized individuals or social networks because of dislike for the owner of the PHI). Gives access to a restricted area to an unauthorized individual. Gives access to PHI to an unauthorized individual. Sanction: Termination Termination and possible legal action. Yes, we are all curious, but is record snooping worth the price of losing your job or possible legal action? Respecting privacy protects us all.
  14. Conduct a security risk analysis, preferably guided by experienced compliance professionals. This step alone shows your practice’s due diligence in protecting confidential patient data, and is required by HIPAA. learly communicate your no-snooping policy to all employees. Every new hire should get both a written and verbal orientation to your practice’s zero-tolerance policy on snooping. This policy should also extend to all your business associates, including accountants, lawyers and IT professionals. Due to changes in HIPAA rules, your practice can now be fined if a business associate does the snooping. Give employees only the “minimum necessary” access to protected health information (PHI). Your receptionist doesn’t need access to clinical data, which eliminates the temptation to peek into Brad Pitt’s files – or those of an ex-spouse or neighbor. Password-protect medical files depending on “need to know.” Employees should be frequently reminded that your practice prohibits the sharing of passwords and user IDs.
  15. Document a formal process for initiating and terminating access. Your office manager should establish and document controls for granting and terminating employee access to patient records — and access needs to be immediately shut down when an employee leaves the practice. Communicate and enforce disciplinary actions for snooping. Employees should know upfront what the consequences will be, such as suspension or termination of employment in cases of malicious intent. Conduct background checks. Follow ERISA rules, but conduct background and reference checks before new employees start the job. Many snooping violations go unreported, but running these checks will represent reasonable due diligence and may prevent costly fines and a tarnished reputation. Allow patients to restrict the sharing of PHI. You’re required to honor a patient’s special request for privacy (e.g., an ex-spouse of one of your nurses requesting that he/she not have access to PHI).
  16. Record snooping can cause serious harm to your practice. Although there is no way to completely eliminate record snooping, there are steps you can take that will help protect your practice if a violation occurs.
  17. Manage & Mitigate Risks