With a $1 million settlement, HHS and Rite Aid have closed the book on a HIPAA privacy case that began with a journalist’s investigative reporting in 2006. In a nut shell, Rite Aid employees across the country were tossing prescriptions and pill bottles out without taking measures to secure the sensitive information they held.
They were exposed by Bob Segall, Jim Hall and Bill Ditton of WTHR-Indianapolis. For the story, Segall eventually checked dumpsters in 12 cities nationwide and found unsecured information in all of them. Segall told the tale of how he broke the story, and how other reporters could do the same, in this article for AHCJ members.
For those unfamiliar with the case’s background, NPR’s April Fulton can get you up to speed. CVS settled with HHS last year, and NPR’s Fulton reports that Walgreens will be next.