Former UPMC Shadyside Hospital employee charged with HIPAA violation

[security curmudgeon <jericho () attrition org>]

http://www.phiprivacy.net/?p=3786

Former UPMC Shadyside Hospital employee charged with HIPAA violation
By Dissent
September 18, 2010

In the first HIPAA prosecution in the Western District of Pennsylvania, 
United States Attorney David J. Hickton announced this week that a 
resident of Monroeville, Pa., had been indicted by a federal grand jury in 
Pittsburgh on charges of multiple illegal disclosures and use of patient 
individually identifiable health information for personal gain. The Health 
Insurance Portability and Accountability Act of 1996 (HIPAA) law passed by 
Congress provides for national standards for electronic health care 
transactions, and protects patients from the unauthorized disclosure of 
personal medical information without their consent.

The 14 count indictment named Paul C. Pepala, 34, as the sole defendant.

[..]
_______________________________________________
Dataloss-discuss Mailing List (dataloss-discuss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php