In 2007, actor George Clooney was hospitalized in New Jersey after a motorcycle accident. When the hospital's privacy officer conducted a privacy audit of the HER, the audit revealed that 27 doctors and other hospital employees not involved in the care had access the record. Within hours, information regarding his hospitalization and condition was published by a pop culture magazine. The access and release of information is a clear HIPAA violation. As an HIM professional, what recommendations would you make to the hospital chief executive officer (CEO) for discipline of:
• The employee(is) who accessed the record to satisfy personal curiosity • The employee(s) who leaked information to the press
