Texas Health System Pays $2.4M to Settle Unauthorized Patient Disclosure

A Texas-based health system reached a $2.4 million settlement after it disclosed a patient’s identity without authorization in a press release.

The patient had been arrested for presenting fake identification to staff at Memorial Hermann Health System, and Memorial included the patient’s name in a press release describing the incident without the patient’s approval, the Health and Human Services Office for Civil Rights said May 10.

“This case reminds us that organizations can readily cooperate with law enforcement without violating HIPAA, but that they must nevertheless continue to protect patient privacy when making statements to the ...