Question on privacy act at hospital. Is staff employee allowed to share information about patient to anyone?

Question

Grandparents were doing deposition and employee from local hospital shared information on patient who was admitted to hospital a few years back. Patient did not give release or sign release papers. Employee took it upon herself to tell Attorney was in hospital and gave details. Now I thought Privacy act was at all local hospitals and staff is not allowed to share information with anyone without patient signing release form. Employee as local hospital took upon herself and shared this information.

Answer 1

Employee broke the law and when the name of the employee comes out as the source of confidential patient information,  employee can be fired.  Employee can be sued under federal law.   Employee faces some major legal fees,  fines and possibly jail time.  

UNLESS a judge ordered the employee to give an official disposition. to the lawyer as part of an investigation to a lawsuit.   If a judge so ordered,  that gives the employee a clean ticket for what they did.  

Answer 2

This employee broke a HIPPA rule. You are right. They CAN NOT give out patient information unless it is on a need to know basis (doctors, nurses, parents caring for patient).  

Answer 3

Doctors, aren't to discuss patient  records, or medical history. And staff, depending on position, usually don't count as "medical experts",or have access to pertinent personal info., which wouldn't be admissible anyhow.