Anonymous wrote:She made a mistake, not her spouse.

I received the letter. I am satisfied with Foxhall’s handling of the matter.

I would not call this “a mistake.”

I would report her to the state licensing authority.

HIPPA is Federal law.

Anonymous wrote:This seems like a pretty clear theft of trade secrets. (Customer lists are trade secrets.) will be interesting to see what Foxhall does.

There is no way for a private person to sue for a HIPAA violation.

Customer lists may, in certain circumstances, be considered to be trade secrets.

This says more about her new employer, they should fire her. I wouldn't want to have someone working for me who obviously thinks it's okay to behave unethically.

This is inexcusable. Based on her husband’s profession, you would think she would have known better, which makes it seem like she did this knowing it was wrong, like a better to ask forgiveness than permission situation. She and Alloy need to be held legally and financially accountable. The practice also should be held accountable by HIPAA as they did not have the proper protocols in place to prevent her from downloading this information. This breach has violated my trust in a practice that provides very personal healthcare for women and that should provide an atmosphere where patients feel safe.

Anonymous wrote:I did a quick search and Alloy is a telehealth company focused on menopausal and post menopausal symptoms. This feels very calculated to take an entire patient roster and contact them about something that’s not directly related to their current care.

Calculated and illegal.

Anonymous wrote:

Anonymous wrote:This seems like a pretty clear theft of trade secrets. (Customer lists are trade secrets.) will be interesting to see what Foxhall does.

There is no way for a private person to sue for a HIPAA violation.

While not a suit, there is a complaint procedure:
Filing a Complaint
If you believe that a HIPAA-covered entity or its business associate violated your (or someone else’s) health information privacy rights or committed another violation of the Privacy, Security, or Breach Notification Rules, you may file a complaint with the Office for Civil Rights (OCR). OCR can investigate complaints against covered entities (health plans, health care clearinghouses, or health care providers that conduct certain transactions electronically) and their business associates.

https://www.hhs.gov/hipaa/filing-a-complaint/index.html

THIS. HIPAA has no choice but to investigate.

If true, Time to sue her for HIPAA violations

Anonymous wrote:Foxhall patient here pretty much since it started a few locations back. I think she helped start the practice. I thought she was the owner when she left.

Yes, me too, PP. In the letter from Foxhall, it clearly states she was an owner and employee.

Anonymous wrote:This seems like a pretty clear theft of trade secrets. (Customer lists are trade secrets.) will be interesting to see what Foxhall does.

There is no way for a private person to sue for a HIPAA violation.

While not a suit, there is a complaint procedure:
Filing a Complaint
If you believe that a HIPAA-covered entity or its business associate violated your (or someone else’s) health information privacy rights or committed another violation of the Privacy, Security, or Breach Notification Rules, you may file a complaint with the Office for Civil Rights (OCR). OCR can investigate complaints against covered entities (health plans, health care clearinghouses, or health care providers that conduct certain transactions electronically) and their business associates.

https://www.hhs.gov/hipaa/filing-a-complaint/index.html

Foxhall patient here pretty much since it started a few locations back. I think she helped start the practice. I thought she was the owner when she left.

I also got the letter. I never saw her so I was not her patient. That she did this is terrible and any excuses about technology or that she may have been an owner just don’t cut it. I’m not upset with Foxhall for their letter. But this breach of trust should subject her to discipline. And if anything her new employer will not get my business and this makes me think less of them. I would expect them to take some action against her.

And law firms don’t allow departing partners to take contacts for all firm clients.

Anonymous wrote:This seems like a pretty clear theft of trade secrets. (Customer lists are trade secrets.) will be interesting to see what Foxhall does.

There is no way for a private person to sue for a HIPAA violation.

Doubtful if she was an owner. There was likely a loophole in her partnership agreement. Otherwise the Foxhall letter would have stated legal action is being taken so as to reassure patients.

I did a quick search and Alloy is a telehealth company focused on menopausal and post menopausal symptoms. This feels very calculated to take an entire patient roster and contact them about something that’s not directly related to their current care.