Monday, September 25, 2006
A recent indictment in Florida presents a novel prosecution theory - state identity theft becomes a HIPAA violation. The Indictment charges conspiracy and computer fraud, but also adds a count of wrongful disclosure of identifiable health information. Information is allegedly compromised by a medical clinic's employee who steals patient information and then allegedly sells this information. As opposed to proceeding with a state theft charge, the government decides to proceed with a federal prosecution, because after all - if the allegations are accurate - the information is covered under HIPAA.
The Indictment can be found here.