Compliance, Privacy, and Human Resources departments in covered entities play an integral role in developing policies and plans to sanction staff members who violate policies and/or privacy and security laws. Medical staff (for example, physicians), on the other hand, are evaluated by their peers rather than by human resources. This often results in different, and some may argue inequitable, sanctions for physicians who violate privacy and/or security policies and laws.
What are your thoughts on imposing different levels of sanctions for covered entity staff members versus medical staff? Should all employees be held to the same standards and face similar disciplinary action for similar wrongdoings? How should covered entities address doctors being treated more leniently than non-physicians?
