Written by: Katherine Rourke
A New Hampshire hospital has been forced by the state’s Superior Court to provide public health officials with access to its EMR so they can further investigate a major hepatitis C outbreak.
Exeter Hospital had been ordered by the state’s Division of Public Health Services to release patient records, but had challenged the order, arguing that it would be violating state and federal law if it provided free access to EMR records.
The issue dates back to July, when a lab technician formerly employed by the hospital was arrested in connection of a hep C outbreak affecting more than 30 patients. The lab tech, who has hep C, allegedly stole fentanyl-filled syringes from the hospital, injected the fentanyl, then refilled the dirty syringes with another substance.
The hospital sought guidance from the courts in an effort to learn just how much access it would have to provide without running afoul of HIPAA and state privacy laws. (If I were running Exeter Hospital I certainly would have done the same thing; otherwise, one would think it’d be wide-open liable to suits by patients who objected to the data sharing.)
Now, it seems, the hospital is satisfied that patients involved in the outbreak are adequately protected. From its official statement on the matter:
The Court pointed out that the State needs to follow very specific, CDC-sanctioned protocols in collecting data from Exeter Hospital’s electronic medical record system and can only obtain the minimum amount of information necessary to complete its investigation. The Court has also emphasized that the information collected by the State cannot be re-published which helps to protect the privacy of patients.
For both the patients’ and Exeter’s sake, let’s hope that the public health authorities involved handle such explosive data with extreme care. A data breach at this point would not only have devastating consequences — particularly if the hepatitis C sufferers’ names were made public — it would also plunge all involved into a legal nightmare. For their sake, I’m hoping for the best.