BayCare Health System and the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) settled for $800,000 over alleged HIPAA violations, according to an announcement.
OCR received a complaint in 2018 that an unauthorized individual had access to a patient’s electronic protected health information (ePHI), and began an analysis. The unauthorized party had pictures of her “printed medical records” and “a video of someone scrolling through her medical records on a computer screen.”
OCR discovered that “the credentials used to access the complainant’s medical record belonged to a non-clinical former staff member of a physician’s practice, which had access to BayCare’s electronic medical records for the continuity of common patients’ care.” They also uncovered multiple alleged HIPAA failures.
The Florida-based health system will undergo a corrective action plan.
