Examining the protected health information of a celebrity without cause will, at worst, result in your employer terminating your employment.

• A. True
• B. False
• C. It depends on the policy
• D. Could result in criminal charges

Answer: (B)

Unauthorized access to protected health information violates HIPAA’s Privacy and Security Rules. When someone looks at a celebrity’s PHI without a legitimate, job-related reason, it’s not just poor judgment—it’s a breach with potential legal consequences. The consequences can be much more serious than losing a job. Organizations can face civil penalties for violations, and individuals can face criminal charges if there is intentional misuse or disclosure of PHI. The penalties vary based on intent and the breach’s severity, and in extreme cases can include fines and imprisonment. So while termination may occur, it isn’t the worst or the only possible outcome; criminal charges and civil penalties are real possibilities depending on the facts. This reflects the need-to-know standard and the strong protections around PHI to prevent harm and preserve privacy.