Ms. Krouse filed the lawsuit in 2015 against Chris Krouse, MD, a physician at Mitchell, S.D.-based Avera Queen of Peace, alleging he repeatedly accessed her medical information in violation of her privacy. Avera was also named in the suit, but the jury decided not to hold the hospital liable since Avera argued Dr. Krouse violated its policies by using login credentials of other employees to access Ms. Krouse’s medical information.
“Avera takes seriously its obligation to secure its patients protected health information as required by the state and federal privacy laws and regulations,” Avera said in a statement to The Daily Republic Thursday. “Expansive computer systems and networks designed to allow the sharing of patient records in emergent and routine care situations are safeguarded and staff with access to protected health information receive frequent and thorough training regarding their obligations to maintain the confidentiality of protected health information.”
More articles on cybersecurity:
McAfee: 5 cybersecurity trends to watch in 2018
OCR: 8 tips to ensure former employees don’t leak PHI
NHS to spend $26M on security operations following WannaCry attack: 4 things to know
