• Your Rights to Your Medical Records

  • After four years of legal proceeding for Susan Jordan, The Court of Appeals of Virginia ruled that the University of Virginia Medical Center (Medical Center) could not fire her for obtaining her ill ex-husband’s medical records, after he was diagnosed with cancer.

    On April 23, 2014, Susan Jordan was fired for looking at her ex-husband Kurt’s medical records “without authorization”. Both Jordan’s were employed at the Medical Center, and were registered nurses. Susan was an employee for six years with a “spotless personnel record and nothing but positive performance evaluations,” according to an appeal memo. Despite their divorce, they maintained a “very close and trusting relationship,” and that’s why he executed legal documents to have her act as his agent in 2012. He completed the Medical Center’s authorization form, for her to have the full authority to gain access to his medical records, along with a durable power of attorney and an advanced medical directive.  

    Four times after a clinical visit between December 2013 and February 2014, Kurt, weak, with tremors and having difficulty seeing, asked for her help in understanding lab results, according to court documents. At least two of these times, Susan’s supervisor was present and approved the access.

    On February 2, 2016, after the appeal made by the Medical Center, The Court of Appeals of Virginia upheld the March 24, 2015 ruling of all three independent reviewers which found that Susan was unfairly fired. 

    Fast forward to February 25, 2016, when Director of the Office for Civil Rights, Jocelyn Samuels stated in the press release, “at the Office for Civil Rights (OCR), we believe strongly that every individual should be able to easily exercise their right to access their health information, allowing them to be fully engaged in their care and empowered to make the health care decisions that are right for them. The HIPAA Privacy Rule has always provided individuals with the right to access and receive a copy of their health information from their providers, hospitals, and health insurance plans. But this right has not always been well-understood, and far too often individuals face obstacles accessing their health information, even from entities required to comply with HIPAA.”

    “Furthermore, the right to have information sent directly to a third party empowers individuals to send their information wherever they want it to go – for example, to another health care provider, a friend or family member, researchers, or even a consumer tool such as a personal health record or mobile health app,” says Director Samuels.

    • Would the outcome had been different given the new guidance by the OCR?

    • Would the Medical Center have continued their legal battle regarding the firing of Susan Jordan?

    Unfortunately, Kurt Jordan will never know, he passed away on January 30, 2015.

    Judith Lindsay, CHP and CEO of JAL Consult tackles all the elements of HIPAA compliance puzzle. Successfully assisting organizations to make sense of it all by implementing the correct policies and procedures that are reasonable and appropriate for their entity. Judith provides consulting, training and is available for speaking engagements. To read more about the world of compliance subscribed to JAL’s insightful newsletter at www.jalconsultantsaz.com OR follow JAL on Twitter @ judithconsult