Sunday, August 2, 2009

Physician And Two Hospital Employees Plead Guilty To Misdemeanor Violations Of HIPAA In Arkansas Federal Court

HIPAA is becoming an increased basis for criminal prosecutions of licensed health care professionals and health care workers. In Arkansas, there was one of the first federal criminal prosecutions for accessing patient records out of curiosity -- where there was no identity theft or related criminal conduct.

On July 20, 2009, a physician and two former employees of St. Vincent Infirmary Medical Center (SVIMC) in Little Rock, Arkansas, pleaded guilty to misdemeanor violations of the health information privacy provisions of the Health Insurance Portability and Accountability Act.

Each admitted he or she had accessed patient records out of curiosity. All three acknowledged they had participated in HIPAA training provided by SVIMC, and understood the prohibition on accessing records without a legitimate reason for doing so.

The records accessed related to the treatment of Anne Pressly, a local television personality who was brutally beaten by a home intruder on October 20, 2008. Ms. Pressly died at SVIMC on October 25.

Dr. Jay Holland, medical director for Select Specialty Hospital located on one floor within SVIMC, admitted that he logged into the medical center's electronic medical record system from home seeking to determine the accuracy of a television news report concerning Ms. Pressly. The medical center suspended Dr. Holland for two weeks and ordered him to complete additional HIPAA training. Sarah Elizabeth Miller, an account representative for SVIMC, admitted viewing Ms. Pressley's medical records twelve times, and Candida Griffin, an emergency room unit coordinator, accessed the file on three occasions. SVIMC terminated Miller's and Griffin's employment.

Each of the individuals faces up to a year in jail and a $ 50,000 fine for the violation they admitted. Sentencing should take place within the next two months. In determining the actual sentence, the federal judge will consult the advisory U.S. Sentencing Guidelines, which provide appropriate sentencing ranges that take into account the severity and characteristics of the offense, the defendant's criminal history, if any, and other factors. The judge, however, is not bound by those guidelines in determining a sentence. A probation sentence given these individual's lack of prior criminal history seems likely here.

Attorney Commentary: The misdemeanor conviction will be just the beginning of the individuals' legal issues. There are employment issues, the misdemeanor conviction will need to be reported to the licensing boards, potential national reporting, and other collateral consequences.

To understand how a HIPAA violation is reported, you can review the US Department of Health and Human Services Office for Civil Rights website:

As part of compliance plans and a professional's pattern and practice, HIPAA will become more important. This particular case probably obtained the government's attention due to the fact that the patient was a local news celebrity. As records become increasingly electronic and accessible, there are greater risks of unauthorized access.

Any questions or comments should be directed to: or 213-233-2260.
Tracy Green is a principal at Green and Associates in Los Angeles, California. They focus their practice on the representation of licensed professionals, individuals and businesses in civil, business, administrative and criminal proceedings. They have a specialty in representing licensed health care providers. Their website is:


DISCLAIMER: Green & Associates' articles and blog postings are prepared as a service to the public and are not intended to grant rights or impose obligations. Nothing in this website should be construed as legal advice. Green & Associates' articles and blog postings may contain references or links to statutes, regulations, or other policy materials. The information provided is only intended to be a general summary. It is not intended to take the place of either the written law or regulations. We encourage readers to review the specific statutes, regulations, and other interpretive materials for a full and accurate statement of their contents and contact their attorney for legal advice. The primary purpose of this website is not the commercial advertisement or promotion of a commercial product or service and this website is not an advertisement or solicitation. Anyone viewing this web site in a state where the web site fails to comply with all laws and ethical rules of that state, should disregard this web site.

The information provided on this website is for informational purposes only. It is not intended to create, and does not create, a lawyer-client relationship with Green & Associates, Attorneys at Law. Sending an e-mail to Tracy Green does not contractually obligate them to represent you as your lawyer, or create any type of client relationship. No attorney-client relationship will be formed absent a written engagement or retainer letter agreement signed by both Green & Associates and client and which specifies the scope of the engagement.

Please note that e-mail transmission is not secure unless it is encrypted. E-mail messages sent to Ms. Green should not include confidential or sensitive information.