A worker in a Florida hospital took her teenaged daughter to work with her. While there, the daughter accessed computer records of patients who had recently been seen there. The daughter then called patients on the list and told them that they had had positive tests for HIV and pregnancy. One person the daughter called attempted suicide. The mother was discharged and the daughter reportedly served time in juvenile hall.
Lists control mechanisms to be discussed in following slides.
At this point, discuss those policies in effect within your organization. If failure to comply with policy is grounds for disciplinary action, be sure to state that as well. If information confidentiality and protection is governed by a specific group within the organization, name the group and describe its membership. Include a contact party if possible. Describe the types of administrative controls in place, plus where to go for additional information regarding procedures for issuing user accounts, etc.