UCLA Medical Center is taking steps to fire at least 13 employees and has suspended at least six others for snooping in the confidential medical records of pop star Britney Spears during her recent hospitalization in its psychiatric unit, a person familiar with the matter said Friday.
In addition, six physicians face discipline for peeking at her computerized records, the person said.
Questioned about the breaches, officials acknowledged that it was not the first time UCLA had disciplined workers for looking at Spears' records. Several were caught prying into records after Spears gave birth to her first son, Sean Preston, in September 2005 at Santa Monica-UCLA Medical Center and Orthopaedic Hospital, officials said. Some were fired.
"It's not only surprising, it's very frustrating and it's very disappointing," said Jeri Simpson, the Santa Monica hospital's director of human resources, who handled the discipline in the first instance.
"I feel like we do everything that we possibly can to ensure the privacy of our patients and I know we feel horrible that it happened again."
Simpson said UCLA treats celebrities "all the time and you never hear about this."
"I don't know what it is about this particular person, I don't know what it is about her," she added, referring to Spears.
Hoping to head off such problems, UCLA officials sent a memo the morning Spears was hospitalized Jan. 31, reminding employees that they were not allowed to peruse records unless directly caring for a patient. Spears, 26, was not specifically mentioned.
"Each member of our workforce, which includes our physicians, faculty, employees, volunteers and students, is responsible to ensure that medical information is only accessed as required for treatment, for facilitating payment of a claim or for supporting our healthcare operations," chief compliance and privacy officer Carole A. Klove wrote in an e-mail to all employees.
"Please remember that any unauthorized access by a workforce member will be subject to disciplinary action, which could include termination."
Such prying is also considered a violation of state and federal laws governing medical privacy. The laws allow for fines of up to $250,000, although such penalties are uncommon. Under different laws, separate fines are allowed if patients are receiving treatment for mental illness or substance abuse.
The state Department of Public Health said late Friday that it had opened an investigation of the hospital.
Klove declined to discuss specifics of the most recent incidents, citing privacy protections for patients and workers. But she did say the hospital began taking disciplinary actions immediately upon discovering each breach.
"Right from the minute she came in, audits were continually being done," she said. "We watch this all the time. We have people dedicated to looking at records to monitor access."
When employees look at a patient's records electronically, they leave an electronic trail. "We advise all of our workforce that their password is their PIN for lack of a better analogy, and it is their signature," Klove said. When it is used, the systems track which screens they view and for how long.
Those with access to clinical records include healthcare workers and others -- such as billing and admitting staffers -- who need such information to perform their jobs, she said. Housekeepers, for instance, would not have access.
Klove said that all workers must sign statements pledging to adhere to confidentiality rules when they are hired. The hospital is now considering having them sign such statements annually.
Most employees who looked up Spears' data during her most recent hospital stay were unable to review her psychiatric records. The neuropsychiatric hospital, in which Spears was a patient, has tight record security and blocks access to all but those with appropriate credentials.
Instead, what the disciplined employees found were non-psychiatric records from her previous treatment at UCLA, a source familiar with the matter said.
Medical and nonmedical employees are set to be disciplined, although no doctors were targeted for firing, the person said. There is no evidence that any employee leaked information to the media or sold it -- something that hospitals in a celebrity culture have reason to fear.
Nicole Moore, whose union represents three of the non-physician workers involved, said she is trying to determine whether the discipline was administered fairly. Workers are entitled to contest their proposed termination before it becomes final.
"We believe that the university has a responsibility to their patients but also their employees to administer fair and consistent discipline to everybody, regardless of their position, whether it's a doctor who violated it or a certified nursing assistant," said Moore, lead organizer for the American Federation of State, County and Municipal Employees, Local 3299 at UCLA.