Carilion Takes Actions Against Employees for Violating Privacy in High Profiile Case
Roanoke, VA.- Carilion Clinic sent a very strong message to the 11 employees out of the New River Valley clinic and 3 from the Roanoke clinic that it{}says violated the HIPAA law.
In a statement, Carilion stated,{}"14 employees accessed patient medical records without any reason to right after a recent high profile event in our region."
ABC 13 asked what that event was, but Carilion can't release{}that information.
They say appropriate actions have been taken with EACH employee up to and including termination.
Carilion spokesperson Chris Turnbull {}says there are two ways they can find out if there are privacy breaches.
Patients themselves can alert the hospital or Carilion will start to follow certain patient charts if and when there is news coverage or attention brought to certain records.
{}Carilion must report these violations to the Feds and the state licensing agency for all employees involved.{}{}For example, if{}there were any nurses caught snooping.{}
Health care workers who violate the statute can face civil fines and criminal prosecution.
The full statement from Carilion is posted below:{}
STATEMENT FROM VICKI CLEVENGER, VICE PRESIDENT, INTERNAL AUDIT & COMPLIANCE, CHIEF COMPLIANCE OFFICER FOR CARILION CLINIC:"Carilion takes its obligation to protect patient privacy very seriously. We find out about patient privacy concerns in two primary ways. Individuals may raise specific concerns, or Carilion may proactively monitor a high-profile patient's medical record.{}In the wake of a recent high profile event in our region, we learned that 14 employees accessed patient medical records without a legitimate patient-care need. Based on the findings of our internal investigation, appropriate actions have been taken with each employee, up to and including termination. Eleven of the employees were based in the New River Valley, while three were based in Roanoke.{}As background, Carilion provides ongoing education to employees regarding privacy rules and regulations and monitors their access to patient records. When Carilion discovers potential issues, an immediate investigation is launched. Aspects of an investigation vary, but may include a review of the electronic medical record(s) in question and interviews with individuals involved. Anything short of a thorough investigation and appropriate follow-up actions would be inconsistent with what is in our patients' best interests."
