Des Moines Man Sentenced to 27 Months in Prison for Criminal HIPAA Violations

"Des Moines, Iowa – A Des Moines man was sentenced today to 27 months in prison following his pleas of guilty to two counts of a federal indictment charging conspiracy to wrongfully obtain and disclose individually identifiable health information, and wrongfully obtaining individually identifiable health information.

According to court documents, Dustin James Ortiz, 49, conspired with a then employee of the Veterans Affairs Medical Center (VAMC) in Des Moines to obtain individually identifiable health information of an individual which were maintained by the VAMC. The records Ortiz sought to and did obtain pertained to the victim’s mental health conditions and medications. Ortiz obtained this information without authorization required by law. Ortiz then disclosed the records to a third party. Because the conduct involved the intent to transfer and use the health information for personal gain and malicious harm, it was a felony under federal law."...