
On January 3, 2025, a significant lawsuit was filed against a state HIE. The case was brought by a former employee and whistleblower who alleges that the HIE permitted unauthorized access and use of PHI for research purposes in violation of HIPAA, as well as state law and policies. Although the facts that are currently known to the public are not sufficient to conclude that HIPAA’s standards applicable to research were not met, this case has the potential to influence not only the immediate parties involved but also broader interpretations of HIPAA compliance and enforcement in research settings. Among other
Continue Reading State HIE Sued for Alleged “Unauthorized” Use of PHI for Research