Press release from University of Iowa on privacy violations at U of I Hospitals and Clinics regarding 13 Hawkeye football players

January 28, 2011

UI Hospitals and Clinics investigating privacy violations

Officials at University of Iowa Hospitals and Clinics in Iowa City, Iowa, today announced they are conducting an investigation after a proactive screening of the electronic medical records of 13 University of Iowa football players indicated that some of those records may have been accessed inappropriately.

Under the Health Information Portability and Accountability Act (HIPAA), the medical records of patients can only be accessed by health care workers with a legitimate reason to review those records. UI Hospitals and Clinics routinely screens for possible privacy violations. Such screenings are done to protect the confidentiality of all patients, including those with high public profiles.

The players and their families were notified of the possible violations today. The patients will receive letters that will detail the outcome of the investigation, which may take up to two weeks.

All faculty and staff at UI Hospitals and Clinics agree to abide by privacy rules on an annual basis. Anyone who violates the confidentiality of patients is subject to disciplinary action, including termination.

END