Phi violation and help in how to take action
I had a friend we can call S and she works with a healthcare provider. My friend W happens to go to the location in which S works. S decided to tell me information regarding W's visit and violated her phi. S and I no longer speak to one another but I let this violation slip abou two and a half years after the fact. W is very upset and wants to take action but I am worried that this will be hard to prove with thisinformation and if the healthcare provider does not hlod the electronic records for this long. I am hoping to get some information out there to see if anyone has any guidance on this matter. Please any help would be wonderful!