25% off all training courses Offer ends May 29, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends May 29, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

VA Nurse Charged for Unlawfully Accessing a Patient’s Medical Records

A Michigan Nurse at the U.S. Department of Veteran Affairs has been charged with unlawfully accessing and obtaining the medical records of a patient. Jessica Nicole Pitcher, 41, of Shelbyville, is alleged to have accessed and copied the medical records of a patient of the Veterans Affairs Medical Center in Battle Creek, Michigan, without authorization on or around November 27, 2023.

The Health Insurance Portability and Accountability Act (HIPAA) sets standards covering the privacy and security of healthcare information, termed protected health information or PHI under HIPAA. There are strict rules concerning uses and disclosures of PHI, which may only be used or disclosed for purposes expressly permitted by the HIPAA Privacy Rule unless authorization is received from a patient.

Healthcare professionals must abide by the HIPAA Rules and are not permitted to access the medical records of patients unless they have a valid work reason for doing so. The HIPAA Privacy Rule permits access to medical records for purposes related to treatment, payment, and healthcare operations. Nurses are permitted to access patients’ medical records for patients under their care but are not permitted to access other patients’ health records unless the patient concerned has given authorization to do so. In such cases, authorization should be obtained in writing.

HIPAA compliance for nurses is vital, as the penalties for noncompliance such as privacy violations can be severe. Charges against the nurse were filed by the U.S. Attorney’s Office for the Western District of Michigan, and while the charges only relate to the unauthorized access and copying of a single patient’s medical records, the misdemeanor charge carries a maximum sentence of 1 year in jail and a fine of up to $100,000 if the nurse is found guilty.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

“Patients have an absolute expectation of privacy concerning the communications and information shared with medical professionals and contained within their medical records,” said U.S. Attorney Mark Totten.  “Federal law has long protected such privacy to ensure that patients, without fear of any disclosure, can share with their medical providers all information critical to receiving proper medical care. My office will hold accountable those who access or disclose confidential patient health information without authorization and without justification under federal law.” Special Agent in Charge Gregory Billingsley with the Department of Veterans Affairs OIG’s Central Field Office said “Unlawfully accessing patient records erodes trust in VA’s programs and services. The VA OIG will diligently investigate any employee who violates this trust.”

Author: Steve Alder is the editor-in-chief of The HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist