I saw a coworker looking at patient records they shouldn't be
This is an internal HIPAA violation. You have an obligation to report it.
- 1
Do not confront the coworker directly
This is not your job. Confronting them could create workplace conflict and may compromise any investigation.
- 2
Report it to your privacy officer or manager
Tell your supervisor or privacy officer what you saw, when it happened, and which patient records were involved if you know. You are protected from retaliation for reporting.
- 3
Write down what you saw while it's fresh
Note the date, time, what you observed, and any details. Your manager will need this for any investigation.
- 4
Let your privacy officer handle the rest
They will investigate, determine whether a breach occurred, and decide on appropriate disciplinary action and next steps.
Important
HIPAA prohibits retaliation against employees who report violations in good faith. If you experience retaliation, document it and contact HHS.
Related
Still unsure? Ask AI about this situation →
Not legal advice. Follow your organization's policies and consult counsel for legal questions.