How do I report a HIPAA violation and not loose my job?

Published

I have witnessed a HIPAA violation and I am concerned that the persons I tell this to will only ignore it and sweep it under the rug. This violation is known to all persons in administration as well. They are doing nothing about it. They are trying to say "it is ok, we investigated the concern and everyone was approved" etc...but yet I know for a fact that they did no investigation and are now trying to blame staff (because they do not want the attention and possible fines). What do I do in a case where management is the one doing the violating? I can't go to someone in the hospital because they will retaliate against me for reporting it or at least trying to report it. I don't want to loose my job, but right is right. I am supposed to be the patient's advocate. I have already been suspended due to my questioning of their methods. Isn't there a "whistle blowers" protection from that? I am a my wits end. This cannot be allowed to continue. A patient's rights and privacy have been taken advantage of. Please help me find answers...How do I report to OCR and keep my name from being plastered on the front page? Do I need to get a lawyer?

Filing a Complaint

If you believe that a HIPAA-covered entity or its business associate violated your (or someone else's) health information privacy rights or committed another violation of the Privacy, Security, or Breach Notification Rules, you may file a complaint with the Office for Civil Rights (OCR). OCR can investigate complaints against covered entities (health plans, health care clearinghouses, or health care providers that conduct certain transactions electronically) and their business associates.

Thank you for your information.

Specializes in PICU, Sedation/Radiology, PACU.

In addition, you can also call your facility's Compliance Department (some places have a hotline). You should be able to do this anonymously.

Specializes in LTC,Hospice/palliative care,acute care.
I have witnessed a HIPAA violation and I am concerned that the persons I tell this to will only ignore it and sweep it under the rug. This violation is known to all persons in administration as well. They are doing nothing about it. They are trying to say "it is ok, we investigated the concern and everyone was approved" etc...but yet I know for a fact that they did no investigation and are now trying to blame staff (because they do not want the attention and possible fines). What do I do in a case where management is the one doing the violating? I can't go to someone in the hospital because they will retaliate against me for reporting it or at least trying to report it. I don't want to loose my job, but right is right. I am supposed to be the patient's advocate. I have already been suspended due to my questioning of their methods. Isn't there a "whistle blowers" protection from that? I am a my wits end. This cannot be allowed to continue. A patient's rights and privacy have been taken advantage of. Please help me find answers...How do I report to OCR and keep my name from being plastered on the front page? Do I need to get a lawyer?

They likely have investigated the situation but will never share the details.Ask yourself these things-Is this worth ME loosing my job and possibly being blackballed in my community? And think about the situation- is the patient aware of the possible violation and did it harm the patient? The patient should report it him/herself......

+ Add a Comment