solution

Security Measures for Access to Protected Health Information

A New Jersey facility recently had a privacy violation. Sandie, a former employee, was terminated six weeks ago. Apparently, Sandie held a grudge against the hospital for firing her, so she logged into the radiology information system, downloaded PHI from more than 500 patients, and then posted the information on his personal website. One of the current employees, Daisy, who knew Sandie, and just happened to visit Sandie’s website to see if it said what she was doing now. Daisy saw an inflammatory story about the hospital and some PHI posted on the website. Daisy immediately reported the breach to the facilities privacy and security officers.

1. Identify the legal issues involved in this situation.

2. Recommend the security steps this facility needs to take during its investigation (make sure to Identify and include the breach reporting needed if any).