The records were requested to be sent via USPS (mail) in writing. The clerk sent them unprotected to me via open email. This makes them accessable to the entire globe.
Joey,Thank you for your follow-up. You yourself were sent the documentation in violation of HIPAA. But nobody, at least directly or to your knowledge, intercepted the communication. If I understand correctly, then you did not suffer any immediate harm--you may potentially suffer harm in the future if that email was intercepted, but at least so far you have no proof or evidence that took place, merely a concern and anxiety on this matter. That gives you the ability to contact the US Dept of Health and Human Services and filing a grievance against the office for their violation. HIPAA itself does not grant victims a personal cause of action, meaning that the victim would need to go through the governmental complaint process to get recourse, or sue for invasion of privacy. Here, that suit is not yet possible because third parties, to your knowledge, did not receive this information. Should this information somehow get out, then you could also sue the dental office privately for invasion of privacy, identity theft, and any direct injuries or losses, financial or otherwise, that you would obtain from their improper disclosure.Hope that helps.
Anyone entering my name on the internet can see anything (especially pictures) about me that has been sent openly over the net. This exposes my records globally.
Joey,If this was sent via email, email communications are not openly searchable online. Email communication is considered to be private, so if an email was sent to you from the dental office, those contents and images would not be visible to a regular layperson. If this was openly shared, such as via programs such as 'Google Docs', then I can understand your concern and you would be absolutely correct, but an ostensibly private and direct communication remains private. If you can find those images online then of course my answer to you would change, but private email is just that--private. (I am aware of the NSA-Prism scandal but as that has not yet been proven or otherwise confirmed, my answer would not change since a regular person without a governmental clearance or authorization, provided those allegations are true, would still not be able to see your information).Good luck.
Perhaps you can explain the HIPPA situation. A boss gets everything he wants about my medical condition without my permission and HIPPA states to me that unless the nurse admits on her own she violated the HIPPA there is nothing they can do. Is this just another farce of our "protected" systems?
Joey,I would be happy to explain HIPAA regulations to you (one P, two As). HIPAA is only relevant to specific 'covered entities' that are defined in the law. Those entities are split into three general groups, health care providers (doctors, clinics, offices, pharmacies, etc..), health plans (insurers, HMOs, etc...), and health care clearinghouses (entities that perform work as third parties, for example billing). Your boss would not be under HIPAA unless he is in the medical field, so him receiving your documentation is not a crime or a violation that can be attributed to him. But the party who sent the information, the nurse, IS a health care provider and is therefore covered under the law. There is no requirement that the nurse admit anything, if you can show that the email was sent without your express waiver (meaning a written document showing that you permitted the information to be disseminated), it is a violation. I am not sure who told you that the nurse has to admit anything, the act itself is sufficient to show that someone violated your rights.Good luck.
My apologies about the misunderstanding. Allow me to clarify. I went to the hospital where I worked with Panemonea (spelling). My boss went to the nurse and because they knew each other she told him everything despite my specific demand not to. I reported the incident to HIPPA and after a two week inquirery HIPPA stated Unless the nurse admits what she said I have no case.
Joey,I see. That is indeed a violation. Did your boss admit that he obtained your information? You may want to escalate it to the nurse's DON and contact the state licensing board also to report this nurse. I agree that this is a bit of a 'he said/she said' situation where there may just not be enough for them to pursue, but I really do not see this as a situation that you should simply let go.Good luck.
DISCLAIMER: Answers from Experts on JustAnswer are not substitutes for the advice of an attorney. JustAnswer is a public forum and questions and responses are not private or confidential or protected by the attorney-client privilege. The Expert above is not your attorney, and the response above is not legal advice. You should not read this response to propose specific action or address specific circumstances, but only to give you a sense of general principles of law that might affect the situation you describe. Application of these general principles to particular circumstances must be done by a lawyer who has spoken with you in confidence, learned all relevant information, and explored various options. Before acting on these general principles, you should hire a lawyer licensed to practice law in the jurisdiction to which your question pertains.
The responses above are from individual Experts, not JustAnswer. The site and services are provided “as is”. To view the verified credential of an Expert, click on the “Verified” symbol in the Expert’s profile. This site is not for emergency questions which should be directed immediately by telephone or in-person to qualified professionals. Please carefully read the Terms of Service (last updated February 8, 2012).