Benedek v. Franciscan Alliance Inc

CourtDistrict Court, N.D. Indiana
DecidedMay 11, 2022
Docket2:20-cv-00011
StatusUnknown

This text of Benedek v. Franciscan Alliance Inc (Benedek v. Franciscan Alliance Inc) is published on Counsel Stack Legal Research, covering District Court, N.D. Indiana primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Benedek v. Franciscan Alliance Inc, (N.D. Ind. 2022).

Opinion

UNITED STATES DISTRICT COURT NORTHERN DISTRICT OF INDIANA HAMMOND DIVISION MARSHA BENEDEK, ) ) Plaintiff, ) ) vs. ) CAUSE NO. 2:20-CV-11-PPS ) FRANCISCAN ALLIANCE, INC., ) a/k/a FRANCISCAN HEALTH DYER, ) ) Defendant. ) OPINION AND ORDER Seventy three-year old Plaintiff, Marsha Benedek, is a registered nurse with a spotless employment record. She was fired by Franciscan Alliance after she peeked at medical records of a person who Franciscan says was a “person of notoriety.” This designation is important because this type of violation calls for an automatic termination under Franciscan’s employment policies. Franciscan is seeking summary judgment, but Benedek says there are questions of fact in her claim for age discrimination that preclude summary judgment given Franciscan’s uneven enforcement of the policy. I agree with Benedek. In viewing the evidence in the light most favorable to Benedek, there are questions of fact for a jury to resolve over whether Benedek was meeting her employer’s legitimate expectations and whether Franciscan’s supposed reason for terminating Benedek is really just a pretext for firing her and replacing her with someone younger. Undisputed Facts Franciscan is a health care system that has facilities in Indiana and Illinois. Benedek worked as a charge nurse in the adolescent behavioral health unit at

Franciscan’s Dyer hospital for almost 30 years (from 1991-2019). [First Benedek Dep., DE 27-2, at 6.]1 As a registered nurse, Benedek had access to, and was trained to use, Franciscan’s electronic medical records system, called “Epic.” [Id. at 16-17.] Franciscan performed routine audits of Epic to make sure its strict privacy and security policies were being followed, and Benedek was aware that anything she did on the computer

regarding accessing Epic could be viewed by Franciscan. [Id. at 12-16.] Additionally, Benedek had access to, and was familiar with Franciscan’s HIPAA Privacy and Security Policy. [DE 27-1 at 9; DE 27-2 at 13-14.] The written policy provides that Franciscan’s employees were only permitted to “access, use, view, or disseminate information necessary to do their jobs. All other access will be considered a violation of this policy and subject to the appropriate

Corrective Actions.” [DE 27-1 at 36-37.] Although Benedek claims she was not aware of different levels of privacy violations [DE 27-2 at 36], the written Policy states that a Level 1 violation occurs in the case of unintentional access to protected health information and results in written counseling; a Level 2 violation occurs where there is an intentional violation or reckless disregard of the Policy which results in a HIPAA

1 There are a number of exhibits attached in support of the memoranda. For uniformity, citations are to the blue cm/ecf document number and page number found at the top of each page. 2 violation, and that results in a three-day suspension without pay for the first offense, a five-day suspension without pay for the second offense, and termination of employment for the third offense; and a Level 3 violation is defined as “[u]nauthorized

and intentional access to PHI [protected health information] of a person of notoriety” and “unauthorized and intentional access of PHI of multiple records without a business need” and a “Level 3 violation shall [result] in immediate termination of employment.” [DE 27-1 at 46-47.] The Franciscan privacy policy covers 54 pages; dozens of terms are defined in Section VI of the policy. [DE 27-1 at 49-62.] The most critical term for our

purposes is the term “person of notoriety.” Yet that term is left undefined in the Franciscan policy. Id. Franciscan claims that Benedek’s actions rose to a Level 3 violation because she intentionally accessed the chart of a “person of notoriety” without a business need, and during that endeavor, she accessed a second patient’s private information because they happened to have the same name. Franciscan supports this theory as follows: on June

24, 2019, the Northwest Indiana Times published an article about a mother (B.C.), who was charged with felony neglect of her six-month old daughter, which resulted in the child’s death. [Ex. A-3, DE 27-1 at 63.] Benedek testified during her deposition that there was a photograph in the paper, and the mother looked very familiar to her. [DE 27-2 at 27.] Benedek said she felt really bad because sometimes they read sad things

about their prior patients in the newspaper, and she wondered if this woman had been a previous patient of hers. [Id. at 27-28.] She therefore used the Epic System to go into 3 the Patient Station and search B.C.’s name. Id. The system populated a list of two patients with the same name, with their ages next to their names. [Id. at 29-30.] Benedek knew one person was too old to have a young child, so “she opened up the one [she]

thought was our patient, saw that it wasn’t (her) patient . . . and [she] closed it up.” [Id. at 29.] Benedek claims she did not see any of B.C.’s personal information (like her social security number, address, or date of birth.) [Id. at 31.] According to Benedek, she did not open B.C.’s online chart — she saw that B.C. was never a patient in her ward, and she closed it up. [Id. at 29-30.] It is undisputed that, no matter what information

Benedek actually saw, she only accessed the online chart for a few seconds. [Benedek Continued Dep., DE 27-5 at 71-72; DE 27-2 at 27; DE 30-1 at 1.] Franciscan initiated an audit on what they believed was a “newsworthy event,” and Benedek was identified as an employee that accessed B.C.’s chart without a business need. [DE 27-4 at 20, 25; DE 27-1 at 2.] Linda Fletcher, the Administrative Director of Privacy at Franciscan Alliance, was involved in the internal investigation of

Benedek’s access to the patient records. [DE 27-1 at 1.] According to Fletcher, who reviewed the audit trails, Benedek clicked on both of the B.C. names listed, and after clicking on each of the B.C. names, the following protected and confidential information would have been visible to Benedek: the patient’s social security number, address, date of birth, religious preference, race, gender, phone number, and physicians. [Id. at 3.]

Fletcher believes the audit trail also reveals that when Benedick clicked on one B.C. name (the person in the newspaper), she clicked further into the patient’s information, 4 revealing the patient’s treatment encounters with the Franciscan system. [Id.] Fletcher believes that in accessing the chart of B.C. (the one from the article), Benedek was accessing the chart of a person of notoriety without a business need, and in pursuit of

that information, Benedek also accessed a second patient named B.C.’s chart without a business need, and that each of these instances is a Level 3 violation per the HIPAA Privacy Policy. [Id.] After the infraction was caught during the audit, Benedek was interviewed on June 28, 2019. [DE 27-2 at 49-50.] Following the interview, she was suspended for three

days. Id. Franciscan determined that Benedek’s actions constituted a Level 3 violation of the Private Policy, which it determined, required immediate termination. [DE 27-1 at 4.] Benedek was fired just a few days later, on July 2, 2019. [DE 27-2 at 50.] Before this incident, Benedek did not receive a single disciplinary action prior to the one which resulted in her termination. [DE 27-5 at 67.] She received regular pay raises during her time with Franciscan, and every evaluation she received contained all

top ratings. [DE 27-2 at 72; DE 30-1.] At the time of her termination, Benedek was almost 73 years old, and she was at the top of the Franciscan pay scale. [DE 27-2 at 51.] Benedek received training by Franciscan as part of her employment.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

McDonnell Douglas Corp. v. Green
411 U.S. 792 (Supreme Court, 1973)
Anderson v. Liberty Lobby, Inc.
477 U.S. 242 (Supreme Court, 1986)
Gary Millbrook v. Ibp, Inc.
280 F.3d 1169 (Seventh Circuit, 2002)
Joseph L. Simmons v. Chicago Board of Education
289 F.3d 488 (Seventh Circuit, 2002)
Kenneth O'Neal v. City of New Albany
293 F.3d 998 (Seventh Circuit, 2002)
Janine Rudin v. Lincoln Land Community College
420 F.3d 712 (Seventh Circuit, 2005)
Bodenstab v. County of Cook
569 F.3d 651 (Seventh Circuit, 2009)
Eggleston v. South Bend Community School Corp.
858 F. Supp. 841 (N.D. Indiana, 1994)
Jeffrey Olson v. Donald Morgan
750 F.3d 708 (Seventh Circuit, 2014)
Henry Ortiz v. Werner Enterprises, Incorporat
834 F.3d 760 (Seventh Circuit, 2016)
David McDaniel v. Progress Rail Locomotive, Inc.
940 F.3d 360 (Seventh Circuit, 2019)
Pooja Khungar v. Access Community Health Networ
985 F.3d 565 (Seventh Circuit, 2021)
Skiba v. Ill. Cent. R.R. Co.
884 F.3d 708 (Seventh Circuit, 2018)
Simpson v. Franciscan Alliance, Inc.
827 F.3d 656 (Seventh Circuit, 2016)

Cite This Page — Counsel Stack

Bluebook (online)
Benedek v. Franciscan Alliance Inc, Counsel Stack Legal Research, https://law.counselstack.com/opinion/benedek-v-franciscan-alliance-inc-innd-2022.