DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

A follow-up on the case of the dentist convicted of improperly accessing prescription monitoring database: the dentist responds

Posted on November 14, 2013 by Dissent

On October 16, PHIprivacy.net published a post concerning Dr. Fred S. Glick, a dentist in Ohio who pleaded guilty to misusing the state’s prescription monitoring database. In that post, I included statements from the patient whose data were accessed, but had not been able to reach Dr. Glick to get a statement from him. As a result, the post gave the victim’s side of the story but not his.

PHIprivacy.net has received a statement from Dr. Glick that I am reproducing below as submitted:

I am responding because “Mellissa’s” statements contain certain factually inaccurate and misleading information with respect to the court’s ultimate dispensation of this matter.

In fact, during the course of the proceedings the prosecutor was shown evidence that;

A. for many months after she was asked to leave the doctor’s private residence, “Mellissa” continued to initiate and maintain contact with the doctor by e-mail, by text message and in person, on multiple occasions, and for both personal and for professional reasons, (and in particular after an accident in which she damaged her lip and teeth and about which she asked for a prescription) and thereby continued to establish herself as a legitimate patient; and

B. contrary to “Melissa’s” protestations and speculations, the prosecutor was shown evidence that “Melissa’s” residential address was listed in multiple locations on the internet including the Attorney Directory on the web site of the Ohio Supreme Court and would have had nothing to do with why the doctor consulted the OARRS database; and

C. that the doctor had reason to suspect that his DEA license to prescribe controlled medications might be compromised by the additional persons about whom he inquired on the OARRS database.

Ultimately in setting the parameters of the plea arrangement the court determined that the rules governing OARRS access indicate that regardless of any evidence or suspicion he or she may have, a doctor should technically only order an OARRS report on an active or prospective patient, such as Melissa. The doctor therefore conceded that he should have referred the remaining matter to law enforcement to investigate rather than attempting to so himself.

Both parties have now had a chance to tell their side of the story. The take-home message, however, should be that no matter what the motivation or rationalization, covered entities need to adhere to the access and usage rules of prescription monitoring databases, and it remains to be seen what, if anything, the Ohio Dental Board will do with this matter.

Note: given the personally contentious nature of the dispute between the parties,  any comments submitted on this post should be confined to the data security and privacy issues and not include personal attacks on either of the parties.  Comments that violate that standard will not be approved by the moderator. 


Related:

  • Maintenance Note
  • CISA Alert: Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library, CVE-2024-3094
  • System Status Note
  • System Status Note
  • System Status Note
  • Fraudster's fake data breach claims should remind media to be careful what we report
Category: Uncategorized

Post navigation

← Authorities investigating cybersecurity incidents targeting Obamacare website
Women charged in cancer center identity thefts →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Report released on PowerSchool cyber attack
  • Sue The Hackers – Google Sues Over Phishing as a Service
  • Princeton University Data Breach Impacts Alumni, Students, Employees
  • Eurofiber admits crooks swiped data from French unit after cyberattack
  • Five major changes to the regulation of cybersecurity in the UK under the Cyber Security and Resilience Bill
  • French agency Pajemploi reports data breach affecting 1.2M people
  • From bad to worse: Doctor Alliance hacked again by same threat actor (1)
  • Surveillance tech provider Protei was hacked, its data stolen, and its website defaced
  • Checkout.com Discloses Data Breach After Extortion Attempt
  • Washington Post hack exposes personal data of John Bolton, almost 10,000 others

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • CIPL Publishes Discussion Paper Comparing U.S. State Privacy Law Definitions of Personal Data and Sensitive Data
  • India’s Digital Personal Data Protection Act 2023 brought into force
  • Five major changes to the regulation of cybersecurity in the UK under the Cyber Security and Resilience Bill
  • Keeping Cool When ICE Arrives: Basic Raid Response Strategies for Laboratories
  • IRS Accessed Massive Database of Americans Flights Without a Warrant

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.