Five Former Methodist Hospital Employees Charged with HIPAA Violations
Thursday, November 10, 2022
Five Former Methodist Hospital Employees Charged with HIPAA Violations
Memphis, TN – A
federal grand jury has indicted five former Methodist Hospital
Employees for conspiring with Roderick Harvey, 40, to unlawfully
disclose patient information in violation of the Health Insurance
Portability and Accountability Act of 1996, commonly known as “HIPAA.”
United States Attorney Kevin G. Ritz announced the indictment today.
HIPAA was enacted by Congress in 1996 to create national standards to
protect sensitive patient information from being disclosed without a
patient’s knowledge or consent. HIPAA’s provisions make it a crime to
disclose patient information, or to obtain patient information with the
intent to sell, transfer or use such information for personal gain.
According to the indictment, between November 2017 and December 2020,
Harvey paid Kirby Dandridge, 38, Sylvia Taylor, 43, Kara Thompson, 30,
Melanie Russell, 41, and Adrianna Taber, 26, to provide him with names
and phone numbers of Methodist patients who had been involved in motor
vehicle accidents. After obtaining the information, Harvey sold the
information to third persons including personal injury attorneys and
chiropractors.
The conspiracy charge carries a maximum penalty of five years
imprisonment, a fine of $250,000 and three-year period of supervised
release.
Harvey was also charged with seven counts of obtaining patient
information with the intent to sell it for financial gain on various
dates between November 12, 2017, and September 7, 2019. Each of those
charges carries a maximum penalty of 10 years’ imprisonment, a fine of
$250,000 and three years’ of supervised release.
Dandridge, Taylor, Thompson, Russell, and Taber were each charged
with separate violations of disclosing the information to Harvey in
violation of HIPAA. That charge carries a maximum penalty of one year
imprisonment, a $50,000 fine and a one-year period of supervised
release.
This case was investigated by the Federal Bureau of Investigation and the Tennessee Bureau of Investigation.
United States Attorney Kevin Ritz thanked Assistant United States Attorney Carroll L. André III, who is prosecuting the case.
The charges and allegations in the indictment are merely
accusations, and the defendants are presumed innocent unless and until
proven guilty.
| Clinic Sanctions Supervisor for Accessing Employee Medical Record Covered Entity: Outpatient Facility Issue: Impermissible Use and Disclosure A hospital employee's supervisor accessed, examined, and disclosed an employee's medical record. OCR's investigation confirmed that the use and disclosure of protected health information by the supervisor was not authorized by the employee and was not otherwise permitted by the Privacy Rule. An employee's medical record is protected by the Privacy Rule, even though employment records held by a covered entity in its role as employer are not. Among other corrective actions to resolve the specific issues in the case, a letter ...read more |
| Wednesday, November 9, 2022 A federal grand jury in Newark, New Jersey, returned an indictment today charging an Indian national for fraudulently obtaining millions of dollars in Paycheck Protection Program (PPP) loans guaranteed by the Small Business Administration (SBA) under the Coronavirus Aid, Relief, and Economic Security (CARES) Act. According to court documents, Abhishek Krishnan, 40, previously resided in Wake County, North Carolina, before returning to his home country of India. After returning to India, Krishnan allegedly submitted numerous fraudulent PPP loan applications to federally insured banks, including on behalf of purported companies that were not registered business entities. ...read more |
| What is a covered entity’s obligation under the Breach Notification Rule if it transmits an individual’s PHI to a third party designated by the individual in an access request, and the entity discovers the information was breached in transit? This guidance remains in effect only to the extent that it is consistent with the court’s order in Ciox Health, LLC v. Azar, No. 18-cv-0040 (D.D.C. January 23, 2020), which may be found at https://ecf.dcd.uscourts.gov/cgi-bin/show_public_doc?2018cv0040-51. More information about the order is available at https://www.hhs.gov/hipaa/court-order-right-of-access/index.html. Any provision within this guidance that has been vacated by the Ciox Health decision is rescinded. ...read more |
| SCOPE OF CRIMINAL ENFORCEMENT UNDER 42 U.S.C. § 1320d-6 Covered entities and those persons rendered accountable by general principles of corporate criminal liability may be prosecuted directly under 42 U.S.C. § 1320d-6, and the knowingly element of the offense set forth in that provision requires only proof of knowledge of the facts that constitute the offense. MEMORANDUM OPINION FOR THE GENERAL COUNSEL DEPARTMENT OF HEALTH AND HUMAN SERVICES AND THE SENIOR COUNSEL TO THE DEPUTY ATTORNEY GENERAL You have asked jointly for our opinion concerning the scope of 42 U.S.C. § 1320d-6 (2000), the criminal enforcement provision of the ...read more |
|
July 2026
| Su | Mo | Tu | We | Th | Fr | Sa |
| | | 1 | 2 | 3 | 4 |
| 5 | 6 | 7 | 8 | 9 | 10 | 11 |
| 12 | 13 | 14 | 15 | 16 | 17 | 18 |
| 19 | 20 | 21 | 22 | 23 | 24 | 25 |
| 26 | 27 | 28 | 29 | 30 | 31 |
Blog Home
Newest Blog Entries
1/21/25 Understanding Business Associate Agreements
11/12/22 Modernizing Medicine Agrees to Pay $45 Million to Resolve Allegations of Accepting and Paying Illegal Kickbacks and Causing False Claims
11/12/22 Indian National Charged in $8 Million COVID-19 Relief Fraud Scheme
11/12/22 Former Hospital Employee Pleads Guilty To Criminal HIPPA Charges
11/12/22 Covered entities and those persons rendered accountable by general principles of corporate criminal liability may be prosecuted directly under 42 U.S.C. § 1320d-6
11/12/22 The Delaware Division of Developmental Disabilities Services Data Breach
11/12/22 OCR Settles Three Cases with Dental Practices for Patient Right of Access under HIPAA
11/12/22 HHS Issues Guidance on HIPAA and Audio-Only Telehealth
11/12/22 Five Former Methodist Hospital Employees Charged with HIPAA Violations
11/12/22 May a covered entity use or disclose protected health information for litigation?
11/12/22 When does the Privacy Rule allow covered entities to disclose protected health information to law enforcement officials?
Blog Archives
November 2022 (54) January 2025 (1)
Blog Labels
Covered Entity (40) Data Breach (1) HIPAA (2) PPP Fraud (1) HIPAA Enforcement (3) BAA (4) Telehealth (1) EHR Fraud (1) ePHI (2)
|