Patent ID: 8775206

Claim:
A method for detecting privacy violations of patient personal healthcare information (PHI) access comprising: at least one processor defining part of a privacy detection system performing the steps of: generating an audit log for an access to PHI by an authorized user with the at least one processor; communicating with at least one system to collect the audit log with the at least one processor; normalizing and parsing the audit log into a predefined and uniform data format with the at least one processor; discarding parameters considered to be irrelevant to a risk of privacy violation with the at least one processor; comparing at least one parameter of the audit log to a corresponding baseline parameter range of an access to PHI by an authorized user considered to be normal and non-healthcare authorized user information with the at least one processor; adding a weighted risk score assigned to the corresponding baseline parameter range to a cumulative risk score for the access to PHI by the authorized user if the parameter of the audit log differs from the corresponding baseline parameter range with the at least one processor; creating an alert and flagging the audit log when the cumulative risk score exceeds an acceptable threshold with the at least one processor; storing the normalized and parsed audit log in a storage database with the at least one processor; comparing the audit log to a set of patient rules with the at least one processor; and creating the alert and flagging the audit log when at least one audit log parameter matches a corresponding parameter of the set of patient rules with the at least one processor.