On November 26, the U.S. Division of Well being and Human Providers (HHS), Workplace for Civil Rights (OCR) introduced a settlement with Meadowbrook, Pennsylvania-based Holy Redeemer Household Medication regarding an alleged violation of HIPAA.
In September of 2023, OCR obtained a criticism alleging that Holy Redeemer impermissibly disclosed a feminine affected person’s well being data to the affected person’s potential employer. This included her surgical, gynecological, and obstetric historical past and knowledge regarding reproductive healthcare.
An investigation by OCR concluded that Holy Redeemer disclosed the affected person’s full medical report with out the affected person’s authorization. OCR famous that there was no requirement or permission below the Privateness Rule for such a broad launch of medical information. The complainant had requested for Holy Redeemer to ship one take a look at outcome, unrelated to reproductive well being, to a possible employer.
“It’s crucial that well being care suppliers take their responsibility to guard affected person privateness significantly and observe the regulation,” stated OCR director Melanie Fontes Rainer in an announcement. “Sufferers should have the ability to belief that delicate, well being data of their recordsdata is protected to protect their belief within the patient-doctor relationship and guarantee they get the care they want. That is significantly true for reproductive well being privateness.”
Holy Redeemer paid $35,581 and agreed to implement a corrective motion plan figuring out steps to adjust to the HIPAA Guidelines. OCR will monitor the implementation of the motion plan for 2 years.