What you see; what you get
Skip to main content
MDHC_Logotype_white
Subscribe
  • My Account
  • Login
  • Subscribe
  • News
    • This Week's News
    • COVID-19
    • Providers
    • Insurance
    • Government
    • Finance
    • Technology
    • Safety & Quality
    • People
    • Regional News
    • Digital Edition
    • Biden unveils $1.9T plan to stem virus and steady economy
      HHS removes some requirements for opioid treatment prescribing
      Verma: CMS tried to ‘infuse' free-market competition across healthcare during Trump era
      CMS finalizes rule to revamp ACA exchanges
    • Biden unveils $1.9T plan to stem virus and steady economy
      Nursing home staff COVID-19 vaccination: A work in progress
      California hospitals prepare ethical protocol to prioritize lifesaving care
      Expanded vaccine rollout in U.S. spawns a new set of problems
    • The Check Up: Trenda Ray
      The Check Up: Trenda Ray of the University of Arkansas for Medical Sciences
      Trenda Ray
      Q&A: Arkansas nursing leader looking for creative staffing solutions as COVID cases surge
      Cook Lydia 4x6_i.jpg
      Northeast Ohio health systems increase community benefit values in 2019
      Vaccine rollout hits snag as health workers balk at shots
    • COVID-19 still a big uncertainty for insurers in 2021
      Health insurers' outlook boosted after Dems' Georgia win
      humana_i.jpg
      Humana supports Ohio not-for-profits with $500,000
      BlueCrossBlueShieldSign-main_i_i_i.jpg
      Michigan Blues to change pharmacy benefit manager from Express Scripts to OptumRx
    • Verma: CMS tried to ‘infuse' free-market competition across healthcare during Trump era
      CMS axes MFAR rule for good
      MedPAC votes to boost hospital payments, freeze or cut other providers
    • Operation Warp Speed to bump up McKesson's stock price
      Reporter's notebook: J.P. Morgan's 2021 health conference
      Hospitals, nursing homes get more time to file cost reports
      Hospitals' 2020 fundraising on pace to top 2019
    • 5 things to know about Google's $2.1B Fitbit acquisition
      Providence bets on machine-learning, consolidating data centers
      Mental health treatment was most common telehealth service during COVID
      Broad, Verily take Terra bioinformatics platform to Microsoft Azure cloud
    • Chance of COVID-19 triage care looms over Arizona hospitals
      U.S. ramps up vaccinations to get doses to more Americans
      367146427.jpg
      Should businesses mandate that staff get the COVID vaccine?
      71% of Americans surveyed by the Kaiser Family Foundation in December said they would definitely (41%) or probably (30%) get a vaccine if it were free and deemed safe by scientists. 27% of those surveyed said they would definitely (15%) or probably (12%) not get it.
      Data Points: Concerns linger over vaccines
    • Tower Health's finance chief resigning after years of steep losses
      AHRQ director Gopal Khanna resigns in response to Capitol riot
      Brigham president stepping down after Moderna controversy
      Dr. Kenneth Davis
      Mount Sinai CEO offers lessons from one of the nation's first COVID recovery clinics
    • Midwest
    • Northeast
    • South
    • West
  • Insights
    • ACA 10 Years After
    • Best Practices
    • InDepth Special Reports
    • Innovations
    • The Affordable Care Act after 10 years
    • New care model helps primary-care practices treat obesity
      doctor with patient
      COVID-19 treatment protocol developed in the field helps patients recover
      Rachel Wyatt
      Project to curb pressure injuries in hospitals shows promise
      Yale New Haven's COVID-19 nurse-staffing model has long-term benefits
    • Michellene Davis
      Healthcare leadership lacks the racial diversity needed to reduce health disparities
      Dr. James Hildreth
      How medical education can help fight racism
      Modern Healthcare InDepth: Breaking the bias that impedes better healthcare
      Videos: Healthcare industry executives describe their encounters with racism
      Quotes from rebadged employees
      Outsourcing IT, revenue cycle takes toll on internal culture
    • A woman with a wearable sensor talking to her provider.
      Wearable sensors help diagnose heart rhythm problems in West Virginia
      self service station
      COVID-19 pushes patient expectations toward self-service
      Targeting high-risk cancer patients with genetics
      A nurse holds up a phone with a message to a family member saying surgery has started.
      Texting, tablets help hospitals keep family updated on patient care
  • Transformation
    • Patients
    • Operations
    • Care Delivery
    • Payment
    • Highmark Health inks six-year cloud, tech deal with Google
      Study: 1 in 5 patients report discrimination when getting healthcare
      HHS proposes changing HIPAA privacy rules
      Android health records app launches at 230 health systems
    • California hospitals prepare ethical protocol to prioritize lifesaving care
      Amazon, JPMorgan Chase, Berkshire Hathaway disband Haven
      Digital pathways poised to reshape healthcare continuum in 2021
      Healthcare was the hardest hit by supply shortages across all U.S. industries
    • A woman with a wearable sensor talking to her provider.
      Wearable sensors help diagnose heart rhythm problems in West Virginia
      New care model helps primary-care practices treat obesity
      How hospitals are building on COVID-19 telehealth momentum
      Researchers: Hospital price variation exacerbates health inequities
    • MedPAC votes to boost hospital payments, freeze or cut other providers
      Most Next Gen ACOs achieved bonuses in 2019
      Congress recalibrates Medicare Physician Fee Schedule after lobbying
      CMS approves rule to encourage value-based drug pricing
  • Data/Lists
    • Rankings/Lists
    • Interactive Databases
    • Data Points
    • Health Systems Financials
      Executive Compensation
      Physician Compensation
  • Op-Ed
    • Bold Moves
    • Breaking Bias
    • Commentaries
    • Letters
    • Vital Signs Blog
    • From the Editor
    • Wellstar CEO calls adapting for the pandemic her bold move
      Howard P. Kern
      Recognizing the value of telehealth in its infancy
      Dr. Stephen Markovich
      A bold move helped take him from family doctor to OhioHealth CEO
      Dr. Bruce Siegel
      Why taking a hospital not-for-profit was Dr. Bruce Siegel’s boldest move
    • Barry Ostrowsky
      Ending racism is a journey taken together; the starting point must be now
      Laura Lee Hall and Gary Puckrein
      Increased flu vaccination has never been more important for communities of color
      John Daniels Jr.
      Health equity: Making the journey from buzzword to reality
      Mark C. Clement and David Cook
      We all need to 'do something' to fight inequities and get healthcare right, for every patient, every time
    • Healing healthcare: some ideas for triage by the new Congress, administration
      Dr. Sachin H. Jain
      Medicare for All? The better route to universal coverage would be Medicare Advantage for All
      Connectivity: a social determinant of health that can exacerbate all the others
      Taking my shot at building trust
    • Letters: Eliminating bias in healthcare needs to be ‘deliberate and organic’
      Letters: Maybe dropping out of ACOs is a good thing for patients
      Letters: White House and Congress share blame for lack of national COVID strategy
      Letters: VA making strides to improve state veterans home inspections
    • Sponsored Content Provided By Optum
      How blockchain could ease frustration with the payment process
      Sponsored Content Provided By Optum
      Three steps to better data-sharing for payer and provider CIOs
      Sponsored Content Provided By Optum
      Reduce total cost of care: 6 reasons why providers and payers should tackle the challenge together
      Sponsored Content Provided By Optum
      Why CIOs went from back-office operators to mission-critical innovators
  • Awards
    • Award Programs
    • Nominate
    • Previous Award Programs
    • Other Award Programs
    • Best Places to Work in Healthcare Logo for Navigation
      Nominations Open - Best Places to Work in Healthcare
      Nominations Open - Health Care Hall of Fame
      Nominations Open - 50 Most Influential Clinical Executives
    • 100 Most Influential People
    • 50 Most Influential Clinical Executives
    • Best Places to Work in Healthcare
    • Health Care Hall of Fame
    • Healthcare Marketing Impact Awards
    • Top 25 Emerging Leaders
    • Top 25 Innovators
    • Top 25 Minority Leaders
    • Top 25 Women Leaders
    • Excellence in Nursing Awards
    • Design Awards
    • Top 25 COOs in Healthcare
    • 100 Top Hospitals
    • ACHE Awards
  • Events
    • Conferences
    • Galas
    • Webinars
    • COVID-19 Event Tracker
    • Leadership Symposium
    • Healthcare Transformation Summit
    • Women Leaders in Healthcare Conference
    • Workplace of the Future Conference
    • Strategic Marketing Conference
    • Social Determinants of Health Symposium
    • Best Places to Work Awards Gala
    • Health Care Hall of Fame Gala
    • Top 25 Minority Leaders Gala (2022)
    • Top 25 Women Leaders Gala
  • Listen
    • Podcast - Next Up
    • Podcast - Beyond the Byline
    • Sponsored Podcast - Healthcare Insider
    • Video Series - The Check Up
    • Sponsored Video Series - One on One
    • Carter Dredge
      Next Up Podcast: Ready, set, innovate! Innovation and disruption in healthcare
      Next Up Podcast: COVID-19, social determinants highlight health inequities — what next?
      Next Up Podcast: Saving Rural Health
      Ceci Connolly
      Next Up Podcast: How to navigate the murky post-election waters
    • An older man wearing a mask receiving a vaccine.
      Beyond the Byline: Verifying information on the chaotic COVID-19 vaccine rollout
      doctor burnout
      Beyond the Byline: How healthcare supply chain struggles contribute to employee burnout
      Beyond the Byline: Covering race and diversity in the healthcare industry
      Beyond the Byline: How telehealth utilization has impacted investor-owned company earnings
    • Leading intention promote diversity and inclusion
      Introducing Healthcare Insider Podcast
    • The Check Up: Trenda Ray
      The Check Up: Trenda Ray of the University of Arkansas for Medical Sciences
      The Check Up: Dr. Kenneth Davis
      The Check Up: Dr. Kenneth Davis of Mount Sinai Health System
      The Check Up: Dr. Thomas McGinn
      The Check Up: Dr. Thomas McGinn of CommonSpirit Health
      The Check Up: Mark Ganz
      The Check Up: Mark Ganz of Cambia Health Solutions
    • Video: Ivana Naeymi Rad of Intelligent Medical Objects
  • MORE +
    • Advertise
    • Media Kit
    • Newsletters
    • Jobs
    • People on the Move
    • Reprints & Licensing
MENU
Breadcrumb
  1. Home
  2. Providers
May 03, 2010 01:00 AM

What you see; what you get

Agencies, employers clamping down on medical records snooping

Gregg Blesch
  • Tweet
  • Share
  • Share
  • Email
  • More
    Print

    It's perhaps like the urge to look through your big brother's dresser or the medicine cabinet at a neighbor's house. Some healthcare workers with access to medical records can't help but snoop, which is more than naughty—it's a federal crime.

    Enforcement agencies and employers are getting increasingly serious about busting the snoops as electronic records proliferate and access becomes diffuse. Last week Huping Zhou, as far as prosecutors and observers can tell, became the first person to be sentenced to prison (four months) for just looking.

    That is, Zhou didn't use anything gleaned from the records to apply for credit cards, sell to tabloids or do anything else profitable or harmful. Zhou, licensed as a cardiothoracic surgeon in China, worked for UCLA Health System in Los Angeles as a research assistant. After he was told he was being dismissed from the job, his lawyer concedes, Zhou trolled through the records of co-workers and UCLA's many celebrity patients in the three weeks until he was officially terminated.

    Zhou accessed the system 323 times outside of working hours in those weeks and looked at records belonging to the supervisors behind his termination, as well as Drew Barrymore, Tom Hanks, Cameron Diaz and other celebrities, telling the FBI he did so because he was curious, prosecutors said in a court document.

    That's a criminal offense under the privacy provisions of the Health Insurance Portability and Accountability Act of 1996. Zhou entered a conditional guilty plea to the misdemeanor charge, reserving the right to withdraw it pending an appeal of the judge's rejection of a pretrial motion arguing that prosecutors failed to allege that Zhou intended to commit a crime.

    “I don't think he had any malicious intent,” Zhou's lawyer, Edward Robinson, said. “I think it was a combination of curiosity and being upset he'd been wrongfully terminated.”

    Alan Goldberg, an independent lawyer and expert in HIPAA enforcement, said that appeal sounds like a long shot. “Some might say, ‘Look, if you put your eyes on some movie-star medical records, you don't have to have a Ph.D. in privacy to know that's something only a dolt would do.' ”

    Goldberg noted that some people might view what Zhou did as no big deal; all kinds of people who work for the insurance companies and the government and its contractors are looking at private health information all the time, and the only difference is they have a purpose. Nonetheless, Goldberg said, breaches involving celebrities have drawn more scrutiny to the matter. “My sense is, with all the publicity now, he's lucky he didn't get a couple of years in prison.”

    Zhou's sentence was initially publicized by prosecutors as the first prison term ordered for a violation of HIPAA's health privacy provisions. Actually, that distinction goes to Richard Gibson, who pleaded guilty to a HIPAA charge in 2004 and was sentenced to 16 months. Gibson admitted cribbing names, addresses and Social Security numbers from records at the Seattle cancer center where he was a lab technician, then used the information to get credit cards and run up charges totaling about $9,000.

    In 2005, a Justice Department lawyer issued an opinion that narrowly defined the law's criminal reach to providers and organizations explicitly regulated by it, excluding employees and other individuals. U.S. attorneys, though, continued to bring cases against a variety of people, though none so far against hospitals or insurance companies or their corporate officers.

    The health information technology provisions of the American Recovery and Reinvestment Act of 2009, or stimulus law, clarified that the criminal provision can be applied to anyone who obtains or discloses health information maintained by a “covered entity.”

    A Justice Department spokeswoman said the department doesn't gather statistics on HIPAA prosecutions. Based on a survey of cases announced by individual U.S. attorneys, most criminal HIPAA charges have involved theft of information for financial gain. In most of them, but not all, judges have pinned any prison sentences to related charges such as identity theft while giving probation on the HIPAA counts.

    In at least one other case, prosecutors brought criminal charges against healthcare workers who simply let their curiosity get the best of them. In October 2008, local TV news anchor Anne Pressly was fatally beaten and brought to St. Vincent Infirmary Medical Center in Little Rock, Ark. Jay Holland, the medical director of a specialty hospital located in the building, admitted he logged onto the records system from home to check the accuracy of news reports about her status, according to the U.S. attorney's office in Little Rock.

    Holland pleaded guilty to a misdemeanor HIPAA charge and was sentenced to probation and community service, to include speeches educating fellow healthcare professionals about privacy. Two St. Vincent Infirmary administrative employees who peeked at Pressly's records pleaded guilty to the same charge and got probation. “The thought of people trolling through her medical records was almost more than we could bear,” Pressly's father told the judge at the sentencing hearing, according to a published report.

    Zhou's recreational peeking caught up to him about five years after he left UCLA when the U.S. attorney's office embarked on a broad investigation into breaches at the system's hospitals, which is ongoing.

    The only other criminal case stemming from the inquiry so far was more sensational. Lawanda Jackson, an administrative specialist for Ronald Reagan UCLA Medical Center, trolled the records of Farrah Fawcett and sold details of the late actress' 2007 cancer recurrence to the National Enquirer for about $5,000. Jackson died last March, two months before she was to be sentenced.

    A review by the California Center for Health Care Quality that wrapped up last year tallied more than 1,000 UCLA health records accessed for no legitimate purpose since 2003. UCLA terminated, suspended or warned 165 employees and committed to a variety of changes to prevent further breaches.

    Also in the Los Angeles area, 24 hospital workers resigned or were terminated or reprimanded after prying into the files of Nadya Suleman, the woman branded in the media as the “Octomom.” The state fined Kaiser Foundation Hospitals $437,500 for those breaches as well as unauthorized viewings of records of four of the octuplets Suleman gave birth to at the system's hospital in Bellflower, Calif. (Inpatient services have since been transferred to its new Downey [Calif.] Medical Center).

    The fines were levied under a California law passed in 2008 intended to get tough on patient privacy, which subjects healthcare workers and organizations to fines as high as $250,000 for each violation.

    The stimulus law, meanwhile, included provisions intended to make it more painful for healthcare organizations that allow personal health information to be lost or stolen.

    Under the law, state attorneys general are authorized to enforce HIPAA's privacy provisions and impose $25,000 fines. Connecticut Attorney General (and U.S. Senate candidate) Richard Blumenthal was the first to wield the power, suing Health Net over the company's loss of a hard drive.

    The law also requires organizations to notify HHS and local media any time they experience a data breach involving more than 500 people. HHS is posting those breaches to its website. The responsible organizations range from small medical practices to health systems and insurance companies.

    Letter
    to the
    Editor

    Send us a letter

    Have an opinion about this story? Click here to submit a Letter to the Editor, and we may publish it in print.

    Recommended for You
    Q&A: Arkansas nursing leader looking for creative staffing solutions as COVID cases surge
    Q&A: Arkansas nursing leader looking for creative staffing solutions as COVID cases surge
    The Check Up: Trenda Ray of the University of Arkansas for Medical Sciences
    The Check Up: Trenda Ray of the University of Arkansas for Medical Sciences
    Sponsored Content
    Get Free Newsletters

    Sign up for free enewsletters and alerts to receive breaking news and in-depth coverage of healthcare events and trends, as they happen, right to your inbox.

    Subscribe Today

    The weekly magazine, websites, research and databases provide a powerful and all-encompassing industry presence. We help you make informed business decisions and lead your organizations to success.

    Subscribe
    Connect with Us
    • LinkedIn
    • Twitter
    • Facebook
    • RSS
    • Instagram

    Stay Connected

    Join the conversation with Modern Healthcare through our social media pages

    MDHC_Logotype_white
    Contact Us

    (877) 812-1581

    Email us

     

    Resources
    • Contact Us
    • Advertise with Us
    • Ad Choices Ad Choices
    • Sitemap
    Editorial Dept
    • Submission Guidelines
    • Code of Ethics
    • Awards
    • About Us
    Legal
    • Terms and Conditions
    • Privacy Policy
    • Privacy Request
    Modern Healthcare
    Copyright © 1996-2021. Crain Communications, Inc. All Rights Reserved.
    • News
      • This Week's News
      • COVID-19
      • Providers
      • Insurance
      • Government
      • Finance
      • Technology
      • Safety & Quality
      • People
      • Regional News
        • Midwest
        • Northeast
        • South
        • West
      • Digital Edition
    • Insights
      • ACA 10 Years After
      • Best Practices
      • InDepth Special Reports
      • Innovations
    • Transformation
      • Patients
      • Operations
      • Care Delivery
      • Payment
    • Data/Lists
      • Rankings/Lists
      • Interactive Databases
      • Data Points
    • Op-Ed
      • Bold Moves
      • Breaking Bias
      • Commentaries
      • Letters
      • Vital Signs Blog
      • From the Editor
    • Awards
      • Award Programs
        • 100 Most Influential People
        • 50 Most Influential Clinical Executives
        • Best Places to Work in Healthcare
        • Health Care Hall of Fame
        • Healthcare Marketing Impact Awards
        • Top 25 Emerging Leaders
        • Top 25 Innovators
        • Top 25 Minority Leaders
        • Top 25 Women Leaders
      • Nominate
      • Previous Award Programs
        • Excellence in Nursing Awards
        • Design Awards
        • Top 25 COOs in Healthcare
      • Other Award Programs
        • 100 Top Hospitals
        • ACHE Awards
    • Events
      • Conferences
        • Leadership Symposium
        • Healthcare Transformation Summit
        • Women Leaders in Healthcare Conference
        • Workplace of the Future Conference
        • Strategic Marketing Conference
        • Social Determinants of Health Symposium
      • Galas
        • Best Places to Work Awards Gala
        • Health Care Hall of Fame Gala
        • Top 25 Minority Leaders Gala (2022)
        • Top 25 Women Leaders Gala
      • Webinars
      • COVID-19 Event Tracker
    • Listen
      • Podcast - Next Up
      • Podcast - Beyond the Byline
      • Sponsored Podcast - Healthcare Insider
      • Video Series - The Check Up
      • Sponsored Video Series - One on One
    • MORE +
      • Advertise
      • Media Kit
      • Newsletters
      • Jobs
      • People on the Move
      • Reprints & Licensing