Privacy Officer's Roundtable

who's responsible?

  • 1.  who's responsible?

    Posted 10-22-2020 03:15 PM
    ​If an employee saved personal files (taxes, family members names, dob, ssn) to a computer owned by a CE and that pc was involved in an impermissionable disclosure, is the CE responsible for the PII in those files?

    ------------------------------
    Tara Yeaton, RHIT, CHPC
    Director of HIM Operations
    Deputy Privacy Officer
    MaineGeneral Medical Center
    Augusta, Me
    ------------------------------
    2020 SCCE Membership


  • 2.  RE: who's responsible?

    Posted 10-23-2020 06:48 AM
    Hmmmm....was the employee's saving of the information you described part of the employee's assigned roles and responsibilities?  Was the employee using the company owned PC for non-work or personal reasons?




    Posted: 3:47 AM AZ time

    ------------------------------
    -------------Frank "Snake Bite Leader" Ruelas--------------
    ► We don't fail unless we quit! ◄
    Next Up:
    C&C...CPG OIG and 8B2.1

    ░ Pass the Exam Group for 2020 ░
    Melissa Singleton - Jan - CHPC
    Julie Clutter - Jan - CHPC
    Tanisha Grant - Feb - CHC
    Lisa Bibby - Jan - CHPC
    Kelly Puida - Mar - CHPC
    Christina Serrano - Mar - CHC
    Rachel Anderson - May - CHC
    Melissa Alexander - June - CHC
    Theresa Veazey - June - CHC
    Barbara Zubeck - June - CHPC
    Patricia Radatz - June - CHC
    Anthony Fleming - July - CHC
    Laura Chaney - July - CHC
    James Maruyama - July - CHC
    Namrita Notani - July - CHC
    Lisa Campbell - August - CHC
    Susan Hammerschmidt - August - CHC
    Brandi Brooks - August - CHC
    Shari Singleton - August - CHC
    Rebecca Crane - August - CHC
    Meagan Bottrell - August - CHC
    Jill Lyons - August - CHC
    Camille Walton - September - CHC
    Danique Flax - September - CHC
    Melanie Schoonover - September - CHPC
    Meghan Smith - September - CHC***
    Mandi Quigley - September - CHPC
    Madhavi Perumpalath - September - CHC
    Cassie Brazelton - September - CHC
    Meghan Smith - September - CHPC***
    ------------------------------

    2020 SCCE Membership


  • 3.  RE: who's responsible?

    Posted 10-23-2020 08:13 AM
    Depends on their job duties. Why were those files there? Look at your state data breach laws.

    ------------------------------
    Brenda Manning J.D., C.H.C., C.H.P.C.
    Privacy Director
    Privacy Officer
    Carilion Clinic

    The views expressed herein are my own and do not represent those of my employer. They are not meant to constitute legal advice or create an attorney-client relationship.
    ------------------------------

    2020 SCCE Membership