Accessing the financial or billing Accessing, amending, and/or using Financial / billing information of a patient without billing information of a patient info of pt. a job duty reason to do so (no without a job duty / working reason significant harm to patient to do so and/or disclosing the /guarantor and/or no reporting information to a non covered entity required.). as (none or any potential significant “Snooping”. harm to patient/guarantor). This would include SSN and credit card / financial information. Disclosure OR Unintentional - not properly Willful neglect in not properly Use verifying the patient and verifying the patient and Release PHI to disclosing PHI to another disclosing PHI to another party wrong person or where patient identity is where patient identity is pt - Lack of disclosed. (low or no harm to disclosed. (low or no harm to proper ID patient or breach notification) patient or breach notification) verification Posting information regarding Posting information regarding patients (no names) publicly patients (no names) publicly such as Social Media such as on social media sites on social media sites which are posts which are inappropriate or the inappropriate or the patient could patient could be reasonably be reasonably identified with identified. significant harm to patient. Accessing record of a patient Pt. or employee (including employee pt.) without pt. with having a job duty reason to do so significant harm and/or disclosing the information to another party not involved in the patient’s care (significant harm to patient and reporting required) Accessing, disclosing and /or Access/amend amending PHI or Hospital PHI for personal information for personal or gain / malicious professional gain or intent to sell or intent sale of the information.
Financial / billing info of pt. Accessing the financial or billing information of a patient without a job duty reason to do so (no significant harm to patient /guarantor and/or no reporting required.). as “Snooping”. Accessing, amending, and/or using billing information of a patient without a job duty / working reason to do so and/or disclosing the information to a non covered entity (none or any potential significant harm to patient/guarantor). This would include SSN and credit card / financial information. Disclosure OR Use Release PHI to wrong person or pt - Lack of proper ID verification Unintentional - not properly verifying the patient and disclosing PHI to another where patient identity is disclosed. (low or no harm to patient or breach notification) Willful neglect in not properly verifying the patient and disclosing PHI to another party where patient identity is disclosed. (low or no harm to patient or breach notification) Social Media posts Posting information regarding patients (no names) publicly such as on social media sites which are inappropriate or the patient could be reasonably identified. Posting information regarding patients (no names) publicly such as on social media sites which are inappropriate or the patient could be reasonably identified with significant harm to patient. Pt. or employee pt. with significant harm Accessing record of a patient (including employee pt.) without having a job duty reason to do so and/or disclosing the information to another party not involved in the patient’s care (significant harm to patient and reporting required) Access/amend PHI for personal gain / malicious intent Accessing, disclosing and /or amending PHI or Hospital information for personal or professional gain or intent to sell or sale of the information.
P16handout1.docx