Health Sciences Center Revises Process to Prevent Unauthorized Disclosures to Employers
Covered Entity: General Hospitals
Issue: Impermissible Uses and Disclosures; Authorizations

A state health sciences center disclosed protected health information to a complainant's employer without authorization. Among other corrective actions to resolve the specific issues in the case, including mitigation of harm to the complainant, OCR required the Center to revise its procedures regarding patient authorization prior to release of protected health information to an employer. All staff was trained on the revised procedures.