Jefferson County is investigating an allegation that a Sheriffs Department employee illegally accessed confidential records at Samaritan Medical Center.
If Samaritans allegation is true, a registered nurse working for the Sheriffs Department accessed noninmate confidential medical records in violation of federal law and opened the county to the possibility of a civil lawsuit.
The breach was caught by a regular audit conducted in December by Samaritans compliance department. Access to records is not restricted by any kind of software firewall. Instead, audits are conducted weekly and can be done more often if necessary to discourage people from breaking the law.
A red flag went up, Samaritan spokeswoman Krista A. Kittle said. We looked into it further and thats where we recognized that this R.N., who works for the office of corrections and had access to the medical records to check the status of inmates, was actually, while she was in there, looking at other patient records.
Health care professionals at some county government agencies have access to the electronic records of patients. The nurse was authorized only to view the records of inmates under her care at the county jail. Under the Health Insurance Portability and Accountability Act of 1996, no one is permitted access to the records of patients who are not directly in their care unless they have written authorization to do so.
We do know whose records were accessed and the relationship there but we cant disclose that at this point, Ms. Kittle said. We are required to let the patient know that a breach occurred within 30 days of our knowledge of the breach. The patient will be notified that this occurred. Any action they may wish to take from that point is certainly in their hands.
The nurse would have been fully aware of what she was doing and the consequences of her actions, Ms. Kittle said, because to access the records, the nurse would have had to sign a confidentiality agreement, which outlined the law and the actions that would result from any violation.
Sheriff John P. Burns could not be reached for comment Monday night. Other county officials said they had little knowledge of the situation.
I really know very little of this situation. In terms of what we may or may not do, thats going to require some conversations with both our attorneys office and certainly our Sheriffs Department, County Administrator Robert F. Haggemann III said.
Ms. Kittle said that it was her understanding that verbal counseling of the nurse took place, but that other disciplinary actions were at the discretion of the Sheriffs Department.
She was not our employee. We notified her supervisor at the sheriffs office. He came in actually and looked at exactly some of the documentation that we had and said that he would address it with this R.N., Ms. Kittle said.
Typically, a breach of this nature would be, at the very least, grounds for termination, Ms. Kittle said. The employer would also be obliged to turn the matter over to the state Education Department, which licenses registered nurses to practice in New York. The department would conduct its own investigation to determine whether additional disciplinary action should be taken.