This is one to learn from. It seems that Memorial Hermann had a person come into one of their clinics with a false ID card. The staff alerted the police, which was legal, but then MH released the patient’s name in a press release. This caused the Office of Civil Rights (OCR) to become involved and hence the HIPAA violation.
The government’s HHS website has the complete story and I feel it is definitely worth a read to anyone who is in healthcare.
