Peo v. Grant

CourtColorado Court of Appeals
DecidedMay 22, 2025
Docket23CA0810
StatusUnpublished

This text of Peo v. Grant (Peo v. Grant) is published on Counsel Stack Legal Research, covering Colorado Court of Appeals primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Peo v. Grant, (Colo. Ct. App. 2025).

Opinion

23CA0810 Peo v Grant 05-22-2025

COLORADO COURT OF APPEALS

Court of Appeals No. 23CA0810 Mesa County District Court No. 21CR1611 Honorable Matthew D. Barrett, Judge

The People of the State of Colorado,

Plaintiff-Appellee,

v.

Nicole M. Grant,

Defendant-Appellant.

ORDER AFFIRMED

Division V Opinion by JUDGE GROVE Welling and Johnson, JJ., concur

NOT PUBLISHED PURSUANT TO C.A.R. 35(e) Announced May 22, 2025

Philip J. Weiser, Attorney General, Carmen Moraleda, Senior Assistant Attorney General, Denver, Colorado, for Plaintiff-Appellee

Christopher Gehring, Alternate Defense Counsel, Denver, Colorado, for Defendant-Appellant ¶1 Defendant, Nicole M. Grant, appeals the postconviction court’s

order denying her Crim. P. 35(a) motion to correct an illegal

sentence or a sentence imposed in an illegal manner. She contends

that the prosecution’s evidence was insufficient to support the

court’s order setting the restitution amount. We affirm.

I. Background

¶2 While working for a medical facility, Grant impermissibly

accessed multiple individuals’ health records through an online

health information exchange provided by a company called Quality

Health Network (QHN). As a result of an investigation, the State

charged Grant with sixty-four counts of theft of medical records and

one count each of stalking and cybercrime.

¶3 Grant agreed to plead guilty to five counts of theft of medical

records in exchange for the dismissal of the remaining charges and

a stipulated probationary sentence. In its victim impact statement,

QHN requested $33,400.50 in restitution to cover its legal fees and

internal investigative costs that were necessitated by Grant’s

conduct.

¶4 At the providency hearing, Grant pleaded guilty to the five

theft of medical records counts and admitted to a factual basis

1 underlying the charges. She requested a hearing on QHN’s

restitution request. The court sentenced Grant to a controlling

term of three years on probation, with thirty days in jail as a

condition of that probation sentence. The court then set the matter

for a restitution hearing.

¶5 At the restitution hearing, QHN’s privacy compliance officer

testified that four audits were conducted to determine how many

patients, medical records, and providers were involved in Grant’s

impermissible access to the health information. After the audits,

QHN concluded that it had to provide notification to eighteen

providers and eleven patients who were affected by Grant’s conduct.

¶6 The compliance officer testified that QHN consulted with legal

counsel to determine what steps the company was legally required

to take in this situation. The prosecutor offered into evidence the

bills from QHN’s legal counsel for work related to Grant’s conduct.

Defense counsel objected, arguing, in part, that the bills were

heavily redacted and should be excluded under the rule of

completeness. The court overruled the objection and admitted the

bills.

2 ¶7 During cross-examination, the compliance officer agreed that

some of QHN’s legal counsel’s billed services included consultations

with a public relations (PR) firm to help protect QHN’s image (PR

firm consultation fees). But she disagreed that the work

attributable to the PR firm was different from the legal advice QHN

received from counsel. Throughout her testimony, the compliance

officer explained the reasoning behind, and the nature of, the

consultations with the PR firm:

• What I can tell you is that the [PR] consultation was required as a result of the egregious work . . . that had gone on. And the fact that the QHN system is used by many providers -- [the] public is aware of it -- and it’s important for the health and safety of our patients and our community.

If there’s anything that’s affecting QHN’s standing in the community, we want to make sure that we’re protected and that we reveal this was not a QHN system issue. It was . . . an impermissible access. Hence, the purpose of the consultation with the PR firm, advice from counsel was needed.

• The consultation was as a result of the activity that had gone on and the concern that QHN has relative to the protection of all the information and making sure the public knows that we reserve . . . and

3 secure their information. We wanted to make sure -- and we asked our attorney to speak with this PR firm so that the language that we submit to the public is accurate.

• The reason we inquired for help and requested help with the PR firm is the more that this investigation revealed the impermissible and illegal accesses by [Grant] and the harm that had been caused, we realized it was our system that was used for that purpose, and we wanted to make sure the public would know that we’re doing everything we can to protect their information. We weren’t quite sure the right way to say that, and which is why we brought in the PR firm.

• QHN is a nonprofit, and our reputation . . . is a big part of the success of our operation in terms of protecting patient information and keeping the public trust, the trust that their records are correct and safe, as well as the obligation we have to our providers and our organizations that send us the information.

We wanted to make sure that we explain everything correctly, that we assure the public. And sometimes, you know, I can tell you that, but it may not make sense to the public, so I needed an expert to help.

¶8 The compliance officer testified that working with a PR firm

would not have been necessary for a small breach and that the

4 consultations here were required because of the scope of Grant’s

impermissible access to QHN’s service. Indeed, the compliance

officer further testified that the size of the breach was going to

require a public notification to the “Office of Civil Rights,” and QHN

had not previously had to make such a notification.1 She also

testified that, if QHN ceased to operate, it would result in harm to

patients.

¶9 The compliance officer acknowledged that QHN’s legal counsel

redacted their bills and that she did not know the content of the

redactions. Specifically, she was unable to say whether the

redacted information involved consultations with the PR firm. But

the compliance officer explained that the redactions were made to

protect attorney-client privilege and maintained that the bills were

fair and accurate because she had records of the conversations

related to the billed services.

¶ 10 Defense counsel moved for the discovery of the unredacted

bills to determine whether the redacted services were related to

1 Although not identified by the compliance officer in her testimony,

we presume that the Office of Civil Rights referred to a government agency that monitors a medical facility’s compliance with privacy laws.

5 legitimate legal advice or to protecting QHN’s public interest. The

court denied that request.

¶ 11 Defense counsel argued that the PR firm consultation fees

were not compensable as restitution and that the prosecution did

not meet its burden of establishing that the legal fees associated

with redacted information should be ordered. The prosecutor

countered that the PR firm consultation fees were not incurred to

generate new business for QHN but instead to address the damage

Grant caused to QHN’s reputation.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

People v. Bowerman
258 P.3d 314 (Colorado Court of Appeals, 2010)
People v. Simpson
93 P.3d 551 (Colorado Court of Appeals, 2004)
People v. Jenkins
2013 COA 76 (Colorado Court of Appeals, 2013)

Cite This Page — Counsel Stack

Bluebook (online)
Peo v. Grant, Counsel Stack Legal Research, https://law.counselstack.com/opinion/peo-v-grant-coloctapp-2025.