Workforce Privacy & Security Policies

Has your Practice implemented Workforce Privacy & Security policies and procedures to determine whether a particular user has the right to access ePHI (electronic protected health information) based on his/her particular job duties and responsibilities? Some workforce members may require different levels of access based on his/her job function or role within your Practice. Do you have a technical system in place to monitor inappropriate access such as log in monitoring or other technical safeguards?

The Risk of Mishandled Medical Records

Montefiore Medical Center recently fired an employee for allegedly stealing and improperly accessing 4,000 patient medical records. Between January 2020 and July 2020, the employee accessed these records without any legitimate reason. The medical center in New York had implemented safeguards to monitor inappropriate access, which enabled them to identify and address the breach. Law enforcement is currently investigating the case, and the Office for Civil Rights (OCR) is also conducting an inquiry into the incident.

Employees who engage in such actions risk severe penalties, including imprisonment, as these violations may fall under federal and state laws, such as the Computer Fraud and Abuse Act. Once the investigation concludes, this case is likely to make headlines again.

Modern Practice Solutions

Modern Practice Solutions provides tailored solutions to help your practice stay ahead in a rapidly evolving healthcare landscape.