Professor takes on hospital in Utah Medicaid breach

When University of Utah health law professor Leslie Francis learned her name and Social Security number had been exposed in the state's Medicaid breach, she decided to investigate. She deduced that her information was sent to the Utah Department of Health by a provider inquiring whether she was covered by Medicaid. That was a surprise, because she is insured through her employer and none of her providers had declared in privacy notices that they may bill Medicaid. What’s more, when she asked the hospital she believes is at fault to "fess up"—citing the Health Insurance Portability and Accountability Act (HIPAA)—the hospital refused, citing the same law.