Skip to main content


U.S. flag
      An official website of the United States government
              Here’s how you know
        Here’s how you knowDot gov**Official websites use .gov**
                 A **.gov** website belongs to an official government organization in the United States.
                  HTTPS**Secure .gov websites use HTTPS**
                 A **lock** (A locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. 
  Menu Close
          Enter the terms you wish to search for.
    Search
        








  
  
    

  
      

                                      About HHS
    
                        
                              
      
      
      Programs & Services
    
                        
                              
      
      
      Grants & Contracts
    
                        
                              
      
      
      Laws & Regulations                  
Civil Rights
  Information for Individuals
    
                        
                                            
      
      
      Filing a Complaint
    
                        
                                            
      
      
      Information for Providers
    
                        
                                            
      
      
      Newsroom

              

    



Breadcrumb
    HHS
                              Civil Rights Home
                              For Providers
                              Compliance Enforcement
                              Examples
                              Case Examples
                              Health Information Privacy Enforcement Examples - HIV/AIDS


    

    

    Navigate to:
  Civil Rights for Providers of Health Care and Human Services
                                            
            
            Provider Obligations
    
                                                  
                                            
            
      
      
      
      Civil Rights Clearance for Medicare Provider Applicants
    
                                                                
                                                                  
            
      
      
      
      Compliance & Enforcement
                          
            
            Resolution Agreements
    
                                                  
                                            
            
      
      
      
      Enforcement Examples
    
                                                  
                                            
            
      
      
      
      Training
    
                                                  
                                            
            
      
      
      
      Resources for Covered Entities
    
                                                                
                                                                  
            
      
      
      
      Civil Rights Laws, Regulations & Guidance
                          
            
            Regulatory Initiatives
    
                                                  
                                            
            
      
      
      
      Regulations Enforced by OCR
    
                                                  
                                            
            
      
      
      
      Civil Rights and COVIDText resize icon

                    




Health Information Privacy Enforcement Examples Involving HIV/AIDS








  
  
    

  
      





**Private Practice Implements Safeguards**

Covered Entity: Private Practice
	Issue: Safeguards; Impermissible Uses and Disclosures
	Summary: A staff member of a medical practice discussed HIV testing procedures with a patient in the waiting room, thereby disclosing PHI to several other individuals.  Also, computer screens displaying patient information were easily visible to patients. Among other corrective actions to resolve the specific issues in the case, OCR required the provider to develop and implement policies and procedures regarding appropriate administrative and physical safeguards related to the communication of PHI.  The practice trained all staff on the newly developed policies and procedures.  In addition, OCR required the practice to reposition its computer monitors to prevent patients from viewing information on the screens, and the practice installed computer monitor privacy screens to prevent impermissible disclosures.**State Hospital Sanctions Employees for Disclosing Patient's PHI**

Covered Entity: Hospital/Health Care Provider
	Issue: Impermissible Disclosure
	Summary: A nurse and an orderly at a state hospital discussed the HIV/AIDS status of a patient and the patient's spouse within earshot of other patients without making reasonable efforts to prevent the disclosure. Upon learning of the incident, the hospital placed both employees on leave; the orderly resigned his employment shortly thereafter. Among other actions taken to satisfactorily resolve this matter, the hospital took further disciplinary action with the nurse, which included: documenting the employee record with a memo of the incident; one year probation; referral for peer review; and further training on HIPAA Privacy. In addition to corrective action taken under the Privacy Rule, the state attorney general's office entered into a monetary settlement agreement with the patient.**Dentist Changes Process to Safeguard PHI**

Covered Entity: Health Care Provider
	Issue: Safeguards, Minimum Necessary
	Summary: An OCR investigation confirmed allegations that a dental practice flagged some of its medical records with a red sticker with the word "AIDS" on the outside cover, and that records were handled so that other patients and staff without need to know could read the sticker. When notified of the complaint filed with OCR, the dental practice immediately removed the red AIDS sticker from the complainant's file. To resolve this matter, OCR also required the practice to revise its policies and operating procedures and to move medical alert stickers to the inside cover of the records. Further, the covered entity's Privacy Officer and other representatives met with the patient and apologized, and followed the meeting with a written apology.**Physician Revises Faxing Procedures to Safeguard PHI**

Covered Entity: Health Care Provider
	Issue: Safeguards
	Summary: A doctor's office disclosed a patient's HIV status when the office mistakenly faxed medical records to the patient's place of employment instead of to the patient's new health care provider. The employee responsible for the disclosure received a written disciplinary warning, and both the employee and the physician apologized to the patient. To resolve this matter, OCR also required the practice to revise the office's fax cover page to underscore a confidential communication for the intended recipient. The office informed all its employees of the incident and counseled staff on proper faxing procedures.

                    
  


Content created by Office for Civil Rights (OCR) Content last reviewed July 26, 2013Back to top
    Contact HHS
    
                        
                                            
      
      
      Careers
    
                        
                                            
      
      
      HHS FAQs
    
                        
                                            
      
      
      Nondiscrimination NoticeHHS Archive
    
                        
                                            
      
      
      Accessibility Statement
    
                        
                                            
      
      
      Privacy Policy
    
                        
                                            
      
      
      Viewers & PlayersBudget/Performance
    
                        
                                            
      
      
      Inspector General
    
                        
                                            
      
      
      Web Site Disclaimers
    
                        
                                            
      
      
      EEO/No Fear ActFOIA
    
                        
                                            
      
      
      The White House
    
                        
                                            
      
      
      USA.gov
    
                        
                                            
      
      
      Vulnerability Disclosure Policy
        Sign Up for Email Updates

Receive the latest updates from the Secretary, Blogs, and News Releases.

Sign Up
  HHS Headquarters
          200 Independence Avenue, S.W.
                  Washington, D.C. 20201
                  Toll Free Call Center: 1-877-696-6775​