tag:blogger.com,1999:blog-5558939360732260529.post6654711845224311203..comments2023-09-29T06:09:21.089-04:00Comments on Ask a Manager: should we report husband's ex-wife to her boss?Ask a Managerhttp://www.blogger.com/profile/05281942480230532899noreply@blogger.comBlogger10125tag:blogger.com,1999:blog-5558939360732260529.post-63754875477296311772009-09-10T15:08:51.897-04:002009-09-10T15:08:51.897-04:00This is an interesting situation. I work in IT, an...This is an interesting situation. I work in IT, and have had some... unfortunate encounters with HIPAA and data security issues. I have also seen situations similar to what the original poster describes.<br /><br />I have seen situations where following a breakup one partner has gone to extreme measures to violate the privacy of the other - ranging from installing spyware on computers to cracking password reset functions and even using social engineering tactics to get tech support to reset passwords. It is quite possible that this situation goes beyond simply changing the e-mail account password.<br /><br />First, I would ask what type of account is being accessed? If this is his personal account, why is patient health information going there? There are additional security measures that need to be taken under HIPAA, which usually include not using personal e-mail accounts or public servers to handle personal health information.<br /><br />If, on the other hand, this is a company account or an e-mail account that should be suitably secure, you may need to have a security audit done to determine how the person is getting access to the e-mails.<br /><br />As other respondents have mentioned, I believe that in the end, this is something that could come back to bite you. In a worst case scenario, the ex-wife may have something she can use against the husband - the fact she was able to access that medical information.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-5558939360732260529.post-36400765448978244862009-08-04T09:21:24.117-04:002009-08-04T09:21:24.117-04:00To answer the title question:
No, you should find...To answer the title question:<br /><br />No, you should find another way to get back at his ex. Alternately, grow up.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-5558939360732260529.post-78281655001329545412009-08-03T02:21:40.395-04:002009-08-03T02:21:40.395-04:00I have been reading ur blog on Feeds for a long ti...I have been reading ur blog on Feeds for a long time... But this post required a comment...<br /><br />Kudos to you, all your posts have been great, relevant and sensible....<br /><br />But this one is a bit different, since this is an Ethical issue more than a HR issue... Great advice highly practical and moral. <br /><br />Appreciate your writing a lot :-)Pratshttp://www.prats.co.innoreply@blogger.comtag:blogger.com,1999:blog-5558939360732260529.post-16620473606347600022009-08-02T22:56:53.195-04:002009-08-02T22:56:53.195-04:00Bad news: HIPAA violations are very rarely pursued...Bad news: HIPAA violations are very rarely pursued as criminal cases; they're more commonly used as evidence in civil suits. Usually all that ever happens is that the health care worker who allowed the leak gets fired. <br /><br />Worse news: That'll probably be the OP's husband if this gets out. And frankly, if he was sharing PHI (Protected Health Information, for those of you new to the HIPAA minefield) over personal e-mail, AND was so ignorant of data security that his ex-wife could read his e-mail... the best he could hope for is that this goes away quietly. <br /><br />The right/honorable thing to do is for the OP's husband to follow Kate's advice... the CYA thing to do is to make it so the ex can't read his e-mail anymore, and shut up.Rebeccahttps://www.blogger.com/profile/00718112236359369771noreply@blogger.comtag:blogger.com,1999:blog-5558939360732260529.post-53825772782498050992009-08-02T15:46:33.135-04:002009-08-02T15:46:33.135-04:00I'll second Kate's suggestion - report it ...I'll second Kate's suggestion - report it to the husband's boss. Let the higher-ups in the "victim" company decide what to do.<br /><br />If the husband is a self-employed doctor, and therefore, the highest boss; he should then contact his lawyer.<br /><br />I do agree with the idea that reporting the ex-wife to <i>her</i> boss sounds like trying to create drama - as in "This will teach her!"<br /><br />It seems to me that this goes beyond a "he said, she said" issue. I'm not a lawyer; But, could it have legal ramifications?<br /><br />The bottom line is this:<br /><br /><b>Protecting the patients' confidential information should take priority before all else in this situation.</b><br /><br />It doesn't matter that the ex-wife is NOT looking for patient inoformation; she is still breaking into a system where it is available - that's what should be reported. If I were a patient of his (where is this doctor, by the way? Just so I know If I should be concerned.) and I heard about this I would be upset.Charleshttp://home.earthlink.net/~nooriginalthought/noreply@blogger.comtag:blogger.com,1999:blog-5558939360732260529.post-46631089754092148512009-08-02T11:22:26.538-04:002009-08-02T11:22:26.538-04:00I have to disagree with your response. Yes, the hu...I have to disagree with your response. Yes, the husband should change his password, that's the obvious solution, but just ignoring the fact that she has been breaking into a confidential source is not right.<br /><br />Instead of reporting the issue to the ex-wife's boss, this should be reported to the ex-husband's boss. The company should know that private information, particularly patient information, has been leaked. That's business critical information. Let senior management decide what the best course of action is.KEHutchinsonhttps://www.blogger.com/profile/17664981385715429246noreply@blogger.comtag:blogger.com,1999:blog-5558939360732260529.post-12969134327466870702009-08-01T17:00:19.135-04:002009-08-01T17:00:19.135-04:00I like the solution you offered. It is of course, ...I like the solution you offered. It is of course, possible to hack into someone's e-mail without a password, but that doesn't sound like what the woman is describing.<br /><br />If that's taking place though, the person to notify first is not the woman's boss.jmkenricknoreply@blogger.comtag:blogger.com,1999:blog-5558939360732260529.post-15818408866491912822009-08-01T15:34:16.122-04:002009-08-01T15:34:16.122-04:00Love the solution you gave on this! It's the m...Love the solution you gave on this! It's the most reasonable thing to do - change the password...Vishveshwar Jatainhttp://blog.benifys.comnoreply@blogger.comtag:blogger.com,1999:blog-5558939360732260529.post-51352578453779941802009-08-01T14:48:00.066-04:002009-08-01T14:48:00.066-04:00Corrected, thanks!Corrected, thanks!Ask a Managerhttps://www.blogger.com/profile/05281942480230532899noreply@blogger.comtag:blogger.com,1999:blog-5558939360732260529.post-61200001562786374432009-08-01T14:46:08.024-04:002009-08-01T14:46:08.024-04:00HIPAAHIPAAAnonymousnoreply@blogger.com