On November 26, the U.S. Division of Well being and Human Companies (HHS), Workplace for Civil Rights (OCR) introduced a settlement with Meadowbrook, Pennsylvania-based Holy Redeemer Household Drugs regarding an alleged violation of HIPAA.
In September of 2023, OCR acquired a grievance alleging that Holy Redeemer impermissibly disclosed a feminine affected person’s well being info to the affected person’s potential employer. This included her surgical, gynecological, and obstetric historical past and data regarding reproductive healthcare.
An investigation by OCR concluded that Holy Redeemer disclosed the affected person’s full medical file with out the affected person’s authorization. OCR famous that there was no requirement or permission beneath the Privateness Rule for such a broad launch of medical information. The complainant had requested for Holy Redeemer to ship one check outcome, unrelated to reproductive well being, to a possible employer.
“It’s crucial that well being care suppliers take their obligation to guard affected person privateness significantly and comply with the regulation,” stated OCR director Melanie Fontes Rainer in a press release. “Sufferers should have the ability to belief that delicate, well being info of their information is protected to protect their belief within the patient-doctor relationship and guarantee they get the care they want. That is notably true for reproductive well being privateness.”
Holy Redeemer paid $35,581 and agreed to implement a corrective motion plan figuring out steps to adjust to the HIPAA Guidelines. OCR will monitor the implementation of the motion plan for 2 years.
