I worked with a gentlemen who passed away. He was very open about his illness. My only knowledge of his illness is through him disclosing it to myself & another coworker in a personal conversation. I wrote a farewell message, briefly mentioning cancer on my personal social networking page. Some coworkers have gone to my boss & stated that I violated HIPAA because at my job, I help verify that members (not coworkers, as was he) are eligible for health insurance.
I do not work with medical claims. I have never seen any of this person's private health records, nor worked on his insurance eligibility. My database does not even contain diagnosis info or medically specific info. I deleted the post and my whole page. Can I lose my job or face legal trouble for this? What can I do?

I should also say that he told us this info in casual conversation, outside of work, in no way related to anything regarding work.

Unless you can prove that you obtained info about his diagnosis directly from him and voluntarily, or that you have no access to diagnosis info from the medical records you have access to, you could be in trouble. But from what you have said, you don't have such access.

It sounds like some of your co-workers have it in for you, maybe over the OT issue.

Unless you can prove that you obtained info about his diagnosis directly from him and voluntarily, or that you have no access to diagnosis info from the medical records you have access to, you could be in trouble. But from what you have said, you don't have such access.

It sounds like some of your co-workers have it in for you, maybe over the OT issue.

You are quite perceptive. They are digging.

I can prove that the information was not obtained in any way in relation to my job.

There was someone else with us when the gentlemen shared his story with us, outside of work. Who verifies this info was obtained through personal correspondence.
So sad.

HIPAA violation or no?

No.


Can I lose my job or face legal trouble for this?

Can you be sued or prosecuted? No. Can you loose your job? If your job is "at will" (and most are), perhaps.

No.



Can you be sued or prosecuted? No. Can you loose your job? If your job is "at will" (and most are), perhaps.

Would I have a case against the company or anyone else if I was fired stemming from these false accusations?
As Scott mentioned above, these accusations are ultimately rooted in the ire around me questioning procedures that violate wage and hour laws.
I've apparently made enemies and they're looking for anything, even the death of a sweet man.
I've got money tied up in retirement plans that is not yet vested that I stand to lose here so I'm trying to tread lightly.
I didn't expect the private wage & hour conversation to leave my bosses office, but it did.

If you can prove you were fired for committing a HIPAA violation and this is the violation, you might have a case. But that's not going to be easy. They can fire you for almost any reason. They can trump up something that would be hard for you to disprove.

Would I have a case against the company or anyone else if I was fired stemming from these false accusations?

Probably. It's called defamation.

I doubt if they fired you that they would word the reason in a way you could easily profit from.

I doubt if they fired you that they would word the reason in a way you could easily profit from.
Bingo!