Rebecca went to the dentist for her 6 month cleaning. Within the waiting room, she noticed someone’s medical records were left in the lobby. She went to the receptionist to return the records, but the receptionist advised her to put them back and the patient will get them after their appointment.

What HIPAA violations were committed in this scenario? Should the dentist office be held responsible for the patient leaving their record? Discuss with your peers if and how the receptionist should be held accountable. Also discuss how the patient’s information might be used if stolen.