Huge HIPAA Violation and Fine

An Indiana court has awarded a plaintiff $1.44 million in a Professional Liability case she brought against a pharmacist, according to Reports from Mondaq. The case highlights how HIPAA requirements affect the day-to-day work required of pharmacists and other allied health professionals, as well as the potentially stratospheric cost of violating those requirements.

Here’s a look at what happened in the Indiana case and how you can ensure that your Allied Health practice maintains HIPAA compliance and avoids costly fines and judgments.

HIPAA Privacy Violation: Improper Disclosure of Client Information

According to sources, the million-plus-dollar judgment resulted from the following events:

  • A Walgreens pharmacist improperly accessed one patient’s information and shared it with her husband.
  • Upon gaining access to the patient’s information, the husband harassed and intimidated her.
  • The alleged reason for the harassment and intimidation was that the patient had a prior relationship with the pharmacist’s husband that resulted in the birth of a child. The husband apparently used information from the patient’s file to deny child support payments the patient requested.

The Indiana Superior Court found in favor of the patient, noting that accessing and sharing her information violated standards of care outlined by HIPAA. In its decision, the court noted that the pharmacist was negligent and guilty of privacy invasion and publication of negligent facts (a Professional Liability / Malpractice matter). It also found that Walgreens had liability for failing to terminate the pharmacist after it learned about the behavior.

What’s perhaps most interesting for other pharmacists and allied health professionals, however, is the potential decision of higher courts.

HIPAA Violations, Standards of Care, and Causes of Action

This case made news in part because it marks the first time a court has awarded a plaintiff such a large judgment for a defendant’s violation of standards of care defined by HIPAA. Here’s why that matters for allied health professionals:

  • Standards of care as causes for action: In law, a “cause of action” is a legal reason why a plaintiff seeks damages from a defendant. In this case, the patient cited the pharmacist’s violation of HIPAA’s standards of care as cause for action. Because the court ruled in the patient’s favor, it set a precedent for allowing other patients to sue allied health professionals (and receive financial awards) over HIPAA violations.
  • Variations in state law: The Indiana court’s ruling, however, could be vastly different from rulings in similar cases in other states. That’s because state law determines the extent to which HIPAA violations can be considered causes of action, and whether those violations can result in more than monetary (civil) damage awards. In other words, some states might come down even harder on HIPAA violators.
  • Establishment of legal precedents: There are still relatively few legal precedents for how HIPAA violations are handled. Specifically, it’s possible that, depending on state laws, HIPAA violations could lead to criminal as well as civil penalties. The Indiana Walgreens case led only to civil penalties (a monetary fine). For this reason, allied health professionals need to be prepared to defend themselves and their practice if and when they’re charged with professional liability for HIPAA violations.

How to Protect Yourself and Your Practice

So what can pharmacists and other allied health professionals do to ensure that they’re protected from lawsuits over HIPAA violations? Obviously, the most important thing is to make sure you are aware of HIPAA care standards (especially as they relate to disclosure of patient information) and that you establish protocol to ensure your employees adhere to those standards.

It’s also important to remember that, even if you don’t think you violated HIPAA guidelines, a dissatisfied patient could bring a lawsuit against you. If your state doesn’t have clear legal precedents outlining how such a lawsuit should be handled, you’ll need solid legal representation to help you argue your case. A solid Malpractice / Professional Liability Insurance policy can pay for the costs of mounting such a defense, which is crucial given the high cost of legal fees.

Finally, keep lines of communication open among yourself, your patients, and your employees. Many legal actions can be avoided by addressing small problems before they grow into big ones.


About Definity Healthcare Administrative Services

My knowledge and experience includes working in the healthcare and computer fields for many years and my educational background includes a Ph.D. in Higher Education, Master’s in Public Administration, Bachelors in Psychology, over 80 credit hours from Pima Community college in healthcare administration and computer technology and another 30 credits from Tacoma Community College where I earned my Associates in Health Information Management and my RHIT certification. All of this education and experience has enabled me to earn four national certifications (CCS and CCS-P from AHIMA and CPC-H and CPC from AAPC) and to write two medical coding books for Cengage/Delmar Publishers. I have worked for more than 25 years with all types of schools, businesses, and agencies and have learned well what creates and what destroys quality. I have used my vast knowledge and education to problem solve including creating tremendous successes out of long-term failures. While others may strive to make lemonade out of lemons, at Definity Healthcareour standards of quality are higher as we make the finest lemon meringue pies instead!
This entry was posted in LIFE CHANGING QUALITY BLOG! and tagged , . Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s