[ Tuesday, September 21, 2010 ]
MLK Ambulatory Care Center data breach:
A janitor steals medical records
and sells them. Sounds like a typical HIPAA horror story. But the janitor didn't steal celebrity records and sell them to the National Inquirer, or accident victim files to plaintiff's attorneys. Rather, the janitor was just selling the paper to a recycler. Of course, if they had been shredded first, it would have been fine. But they weren't, and the whole episode exposes weaknesses in the PHI protection system of the center.
Jeff [10:09 AM]
Blogger: HIPAA Blog - Edit your Template