HCS/335
April 13, 2013
The United States health care system has undergone many changes. Many of these changes have led to the development of laws and regulations to ensure the protection of patient privacy and health information. “The Health Insurance Portability and Accountability Act (HIPAA) is a US law designed to provide privacy standards to protect patients ' medical records and other health information provided to health plans, doctors, hospitals and other health care “providers” ("HIPAA," 2012). In recent years, the number of HIPAA violations has grown causing the enforcement and fining of organizations for breaching a patient’s privacy. Hospice of North Idaho (HONI) is the first health care organization fined $50,000 for a HIPAA violation involving fewer than 500 patients. The fine comes about after HONI was found guilty of compromising 441 patients after an unencrypted laptop containing health information was stolen. In reviewing HONI’s violation, this paper will examine facts, ethical and legal issues, managerial responsibilities, and recommended solutions to prevent a reoccurrence.
Hospice of North Idaho According to "Hospice Of North Idaho" (2013), “Hospice of North Idaho is a nonprofit, community-based hospice servicing North Idaho for more than 25 years” (Hospice of North Idaho). HONI’s mission and vision is to provide every patient with a level of professionalism and excellence. In February 2011, a HONI employee’s computer is stolen from a vehicle and never retrieved; this will result in HONI receiving a $50,000 fine for neglecting the proper steps in securing and encrypting patient information. Although the incident is a major concern, there has been no connection to identity theft or fraud cases involving patient information. However, HONI has made history in receiving the largest fine for a small data breach. The United States Department of Health and Human Services (DHHS) is sending a message, regardless of
References: Ethics. (2013). In Dictionary.com. Retrieved from http://dictionary.reference.com/browse/ethics HIPAA. (2012). In Definition of HIPAA. Retrieved from http://www.medterms.com/script/main Hospice of North Idaho. (2013). Retrieved from http://hospiceofnorthidaho.com/ Reizen, M.R. (2013, January). DHHS settles first HIPAA breach involving fewer than 500 individuals. Jones Walker, 15(2), 1-3.