Tag Archives: identity theft

Don’t Ring in the New Year with a HIPAA Audit – Safeguard Yourself Now

1 Indest-2008-1By George F. Indest III, J.D., M.P.A., LL.M., Board Certified by The Florida Bar in Health Law

Here’s a scary reminder: There are people attempting to hack into electronic health systems every second of every day. Thankfully, most of these attempts are unsuccessful due to the preventive technologies in place to safeguard such information. However, electronic data will never be 100 percent secure.

Electronic health records promised was intended to be a tool for doctors to share patient data, reduce prescription drug errors, and allow patients convenient access to their records. However, since the transition to digital medical records, there have been concerns from patients about privacy, security and identity theft.

Recently, the Office for Civil Rights (OCR) announced that the agency will ramp up its Health Insurance Portability and Accountability Act (HIPAA) privacy and security audit program in 2015 for covered entities and business associates. These audits will focus on device encryptions, media controls, data transmission security protocols, and staff training on HIPAA policies and procedures.

Now is the time to ensure compliance.

Real World Privacy Breaches Happen All the Time.

On December 2, 2014, OCR and Anchorage Community Mental Health Services, Inc. (ACMHS), settled alleged violations of the HIPAA Security Rule. OCR started an investigation into ACMHS’s compliance with HIPAA after receiving a notification about a breach of unsecured electronic patient information affecting 2,743 individuals. The breach resulted from malware that compromised ACMHS’s information technology resources. According to the settlement, ACMHS must pay a $150,000 fine and enter into a resolution agreement and corrective action plan (CAP).

In November 2014, Beth Israel Deaconess Medical Center in Massachusetts agreed to a $100,000 settlement after a physician’s laptop was stolen from the hospital. The computer was not issued by the hospital and had not been encrypted in accordance with the hospital’s policies. However, the hospital was aware that the physician used the device. The laptop contained the health information and personal information, including Social Security numbers, of nearly 4,000 individuals. It’s alleged the hospital took three months to notify affected patients about the breach, which is a violation of HIPAA. (HIPAA requires such notifications to take place within 60 days.)

Tips to Protect Yourself and Your Business.

Again, the HIPAA audit program will be resuming after the first of the year. Accordingly, hundreds of covered entities and business associates will be receiving inquiries that could lead to an onsite audit. The audit requirements will be very difficult for organizations that have not planned in advance. Here are three easy-to-implement steps to prepare your practice.

1. Review the latest HIPAA policies and procedures. Make sure your office is meeting the latest privacy and security criteria. Identify gaps, update documents, and retrain staff on HIPAA policies and procedures. Don’t forget to document your educational efforts. Click here for a link to the latest policies and procedures.

2. Contact your business associates. Ask each of them to provide your practice with an updated Business Associate Agreement and list of all subcontractors they use. For business associates, the 2015 HIPAA audits will focus on risk analysis, risk management and updated policies and procedures for breach notification.

3. Have a risk assessment performed on your practice. To learn more about risk assessments, click here for a previous blog.

Also, a violation of the HIPAA privacy and security provisions does carry civil and criminal penalties. Anyone who is a health care professional or facility, should be aware of these legal provisions. Click here to read my previous blog.

HIPAA is Not One Size Fits All.

Protecting patient data is not a one-size-fits-all method, meaning that security measures and access to electronic records should not necessarily be uniform. There needs to be processes and check points in place at practices to ensure that the electronic health record system and its many users consistently meet HIPAA policies and procedures. Health care practices must be vigilant that when they integrate other medical practices and facilities into their organization that they extend these measures to incorporate new employees, new sites and locations, and various technologies.

As demonstrated throughout this blog, the risks of non-compliance simply outweigh the costs of sound preparation. If you’d like more information, contact a health law attorney experienced in these matters.

Comments?

Are you worried about the next round of HIPAA audits? Are you concerned about HIPAA violations? How are you ensuring compliance within your practice? Please leave any thoughtful comments below.

Contact a Health Law Attorney Experienced in Defending HIPAA Complaints and Violations.

The attorneys of The Health Law Firm represent physicians, medical groups, nursing homes, home health agencies, pharmacies, hospitals and other health care providers and institutions in investigating and defending alleged HIPAA complaints and violations and in preparing Corrective Action Plans (CAPs).

For more information about HIPAA violations, electronic health records or corrective action plans (CAPs) please visit our website at http://www.TheHealthLawFirm.com or call (407) 331-6620 or (850) 439-1001.

Sources:

Van Terheyden, Nick and Faix, Rob. “Digital Health Records: Pain and Gain.” Orlando Sentinel. (December 12, 2014). From: The Orlando Sentinel News Section on page A20.

“Beth Israel Agrees To Pay $100K To Settle 2012 Data Breach Case.” iHealthBeat. (November 25, 2014). From: http://www.ihealthbeat.org/articles/2014/11/25/beth-israel-agrees-to-pay-100k-to-settle-2012-data-breach-case?view=print

About the Author: George F. Indest III, J.D., M.P.A., LL.M., is Board Certified by The Florida Bar in Health Law. He is the President and Managing Partner of The Health Law Firm, which has a national practice. Its main office is in the Orlando, Florida, area. http://www.TheHealthLawFirm.com The Health Law Firm, 1101 Douglas Ave., Altamonte Springs, FL 32714, Phone: (407) 331-6620.


“The Health Law Firm” is a registered fictitious business name of George F. Indest III, P.A. – The Health Law Firm, a Florida professional service corporation, since 1999.
Copyright © 1996-2014 The Health Law Firm. All rights reserved.

Advertisements

Fake Pharmacist Sentenced to Prison for Working in Central Florida Pharmacies

By George F. Indest III, J.D., M.P.A., LL.M., Board Certified by The Florida Bar in Health Law

On November 2, 2012, a former Altamonte Springs resident was sentenced to three and a half years in federal prison for fraudulently working as a Central Florida pharmacist from 2000 to 2009, according to the Department of Justice (DOJ).

Click here to read the press release from the DOJ.

I previously blogged about this story when the fake pharmacist pleaded guilty. Click here to read that blog.

Phony Pharmacist Worked at Central Florida Pharmacies Including CVS and Walgreens.

According to an article in the Orlando Sentinel, the man worked at pharmacies throughout Central Florida, including a CVS and a Walgreens. While working at one of the pharmacies, he allegedly gave a customer the incorrect medication, causing that person to suffer a stroke.

Man Will Spend Time in Prison and Must Change His Name.

Allegedly, the man fraudulently obtained a pharmacy license in September of 2000

from the Florida Department of Health (DOH) by using the name, date of birth, Social Security number and pharmacy education information of a licensed pharmacist in Arizona. In 2004 the man actually changed his legal name by fraud to the name of the licensed pharmacist.

Along with his prison sentence, the fake pharmacist was ordered to change his name back to his legal name.

Fun with Alliteration.

Pardon my alliteration, but I just love all of those “F” sounds like I used in the title for this blog. For comparison, see my blog on Franck’s Pharmacy fungus case.

Look for More Stories on Phony and Fraudulent Health Professionals to Come.

In the near future on this blog we will include additional articles on fake doctors and health professionals, some old, some new.

To see a recent blog on a fake dentist in Miami, click here. You can also read the story of a fake plastic surgeon in New York by clicking here.

Contact Health Law Attorneys Experienced with Representing Pharmacists and Pharmacies.

The attorneys of The Health Law Firm provide legal representation to pharmacists and pharmacies in Department of Health (DOH) investigations, Drug Enforcement Administration (DEA) investigations, FBI investigations and other types of investigations of health professionals and providers.

To contact The Health Law Firm, please call (407) 331-6620 or (850) 439-1001 and visit our website at www.TheHealthLawFirm.com.

Comments?

What do you think of all the fake health provider stories? Please leave any thoughtful comments below.

Sources:

FBI.gov. “Pharmacist Impersonator Sentenced to Prison and Ordered to Change His Name.” FBI, Tampa Division. (November 1, 2012). From Press Release: http://www.fbi.gov/tampa/press-releases/2012/pharmacist-impersonator-sentenced-to-prison-and-ordered-to-change-his-name

Pavuk, Amy. “Fake Pharmacist Sentenced to Federal Prison.” Orlando Sentinel. (November 1, 2012). From: http://www.orlandosentinel.com/news/local/breakingnews/os-fake-pharmacist-prison-20121101,0,4565731.story
About the Author: George F. Indest III, J.D., M.P.A., LL.M., is Board Certified by The Florida Bar in Health Law.  He is the President and Managing Partner of The Health Law Firm, which has a national practice.  Its main office is in the Orlando, Florida, area.  www.TheHealthLawFirm.com  The Health Law Firm, 1101 Douglas Ave., Altamonte Springs, FL 32714, Phone:  (407) 331-6620.

“The Health Law Firm” is a registered fictitious business name of George F. Indest III, P.A. – The Health Law Firm, a Florida professional service corporation, since 1999.
Copyright © 1996-2012 The Health Law Firm. All rights reserved.

South Florida Man Busted for Fraudulently Working as a Pharmacist

By George F. Indest III, J.D., M.P.A., LL.M., Board Certified by The Florida Bar in Health Law

On July 24, 2012, a 49-year-old man from Ruskin in South Fla., pleaded guilty in federal court to fraudulently working as a Central Florida pharmacist from 2000 to 2009, according to the Department of Justice (DOJ) in a press release.


Man Allegedly Gave the Wrong Prescription to At Least One Customer.

Prosecutors said this man worked at pharmacies throughout Central Florida, including CVS pharmacy and Walgreens. According to the Orlando Sentinel, while working at one of the pharmacies, he gave a customer the incorrect medication, causing that person to suffer a severe reaction and stroke.


How He Obtained a License. 

Allegedly, the man fraudulently obtained a pharmacist license in September of 2000 from the State Department of Health (DOH) by using the name, date of birth, Social Security number and pharmacy education information of a licensed pharmacist.

The fake pharmacist was able to renew the license and was allegedly receiving paychecks from pharmacies through the mail.

How the Fake Pharmacists Got Caught.

Local authorities began investigating the South Florida man after a legitimate pharmacist in Arizona reported that his identity had been stolen.

The legitimate pharmacist first learned in 2007 that someone was using his identity in Florida when the Internal Revenue Service (IRS) contacted him about undeclared earnings. He had never worked in Florida and learned someone was posing as him and working as a pharmacist under his name, according to the court records.

To see the full press release on this case, click here.

Fake Pharmacist Facing a Number of Charges and Possibly Time in Prison.

The fraudulent pharmacist pled guilty to mail fraud, aggravated identity theft, and money laundering in Orlando. He faces up to 20 years in federal prison for the mail fraud charge, 10 years for the money laundering charge, and a minimum of two years for any other sentence for the aggravated identity theft charge, the Justice release said.

The Federal Bureau of Investigation (FBI) and the Drug Enforcement Administration (DEA) investigated the case with assistance from the Florida Department of Health’s Division of Medical Quality Assurance.

Click here to see our experience representing pharmacists and pharmacies.

Contact Health Law Attorneys Experienced with Representing Pharmacists and Pharmacies.

The attorneys of The Health Law Firm provide legal representation to pharmacists and pharmacies in Department of Health (DOH) investigations, Drug Enforcement Administration (DEA) investigations, FBI investigations and other types of investigations of health professionals and providers.

To contact The Health Law Firm, please call (407) 331-6620 or (850) 439-1001 and visit our website at www.TheHealthLawFirm.com.

Sources:

FBI.gov. “Pharmacist Impersonator Charged with Mail Fraud, Identity Theft, and Money Laundering.” FBI, Tampa Division. (July 24, 2012). From Press Release: http://www.fbi.gov/tampa/press-releases/2012/pharmacist-impersonator-pleads-guilty-to-mail-fraud-identity-theft-and-money-laundering

TBO.com. “Ruskin Man Admits Identity Theft in Fake Pharmacist Case.” Tampa Bay Online. (July, 24, 2012). From: http://www2.tbo.com/news/health-4-you/2012/jul/24/ruskin-man-admits-identity-theft-in-fake-pharmacis-ar-440248/

Pavuk, Amy. “Feds: Man Stole Pharmacist’s Identity, Worked at Pharmacies Across Metro Orlando.” Orlando Sentinel. (July 24, 2012). From: http://articles.orlandosentinel.com/2012-07-24/news/os-pharmacist-stolen-identity-20120724_1_pharmacies-illinois-court-federal-court

About the Author: George F. Indest III, J.D., M.P.A., LL.M., is Board Certified by The Florida Bar in Health Law.  He is the President and Managing Partner of The Health Law Firm, which has a national practice.  Its main office is in the Orlando, Florida, area.  www.TheHealthLawFirm.com  The Health Law Firm, 1101 Douglas Ave., Altamonte Springs, FL 32714, Phone:  (407) 331-6620.