Since the drive also contained ePHI from previous employers (assuming they are also CE's)...would you contact them to let them know?
Scot Lovejoy RPh. CHC CHPC
Chief Pharmacy Officer
9 Campus Drive, 2nd Floor East
Parisippany, N.J. 07054
(O) 973-540-8400 x227
Confidentiality Notice: This e-mail is intended only for the person(s) to whom it is addressed and may contain information that is confidential, proprietary, privileged or otherwise protected from disclosure. If you are not an intended recipient, please (i) do not read, copy or use this communication, or disclose it to others, (ii) notify the sender immediately by replying to the message, and (iii) delete the e-mail from your system. Thank you.
My question to David was based on my interpretation or your scenario...in that it meant the other information on the drive was ePHI from previous employers. If it could be determined who those other CE's were, I agree that as a CO, I would reach out to them to let them know of the impermissible access and acquisition by the employee.
I'm not sure where you are going with the "disturbing" information path? Disturbing... as in criminal? Then perhaps it's for law enforcement to investigate.