Leslie D. Hayden v. Franciscan Alliance, Inc. ( 2019 )


Menu:
  •                                                                                 FILED
    Aug 19 2019, 9:09 am
    CLERK
    Indiana Supreme Court
    Court of Appeals
    and Tax Court
    ATTORNEYS FOR APPELLANT                                    ATTORNEYS FOR APPELLEE
    Robert D. King, Jr.                                        Christopher L. Riegler
    David R. Thompson                                          Kimberly E. Schroder
    Indianapolis, Indiana                                      Patricia B. Freije
    Katz Korin Cunningham, P.C.
    Indianapolis, Indiana
    IN THE
    COURT OF APPEALS OF INDIANA
    Leslie D. Hayden,                                          August 19, 2019
    Appellant-Plaintiff,                                       Court of Appeals Case No.
    18A-CT-1777
    v.                                                 Appeal from the Marion Superior
    Court
    Franciscan Alliance, Inc.,1                                The Honorable Michael D. Keele,
    Appellee-Defendant.                                        Judge
    Trial Court Cause No.
    49D07-1511-CT-39310
    Mathias, Judge.
    [1]   Franciscan Alliance, Inc. (“Franciscan”) filed a motion for summary judgment
    on the issues of respondeat superior and negligent hiring and retention of an
    1
    Brooke Collins and Jessica M. Hensley have not filed appellate briefs. However, pursuant to Indiana
    Appellate Rule 17(A), a party of record in the trial court shall be a party on appeal.
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019                            Page 1 of 18
    employee on April 5, 2018. Marion Superior Court granted summary judgment
    for Franciscan on July 6, 2018. Leslie Hayden (“Hayden”) now appeals,
    arguing there are issues of material fact that preclude summary judgment. We
    affirm.
    Facts and Procedural History
    [2]   On November 18, 2013, Hayden had x-rays taken at St. Francis Hospital’s
    Radiology Department for a broken arm. Appellant’s App. Vol. III, pp. 54–56.
    Two years later, in 2015, Jessica Hensley (“Hensley”) texted a screenshot of
    Hayden’s confidential medical records to Hayden’s boyfriend, and posted the
    records on Facebook. 
    Id. at 53;
    Appellant’s App. Vol. I, p. 137. Hayden recalled
    that Brooke Collins (“Collins”), Hensley’s best friend, worked as a registrar in
    the St. Francis Hospital Radiology Department, where Hayden received
    treatment in 2013. Appellant’s App. Vol. III, p. 59. Hayden had a complex and
    acrimonious relationship with Hensley and Collins that dated back to high
    school. Appellant’s App. Vol. I, pp. 125, 128, 149.
    [3]   Hayden contacted the hospital’s Administrative Director of Compliance and
    Privacy in July 2015 to ask for an audit of her medical account. Appellant’s
    App. Vol. III, pp. 57, 163. The hospital found that Collins’s password was used
    to access Hayden’s account on November 29, 2013, eleven days after Hayden
    received treatment for her broken arm. Appellant’s App. Vol. I, pp. 81–82.
    Hayden was not a patient of Franciscan on November 29 when Collins’s
    password was used to access her account. Franciscan concluded that Collins’s
    access was unauthorized and improper. Appellant’s App. Vol. III, p. 191.
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019      Page 2 of 18
    Collins has since admitted to accessing Hayden’s private patient information on
    November 29, 2013. Appellant’s App. Vol. IV, p. 84.
    [4]   On November 25, 2015, Hayden brought suit against Hensley, Collins, and
    Franciscan. A fourth defendant, Southside OB-GYN, P.C. was also named but
    later dismissed by stipulation. Appellant’s App. Vol. I, p. 11. Hayden alleged (I)
    respondeat superior against Franciscan for the acts of Collins, (II) negligence
    against Franciscan in failing to have appropriate prophylactic structures and
    systems in place to safeguard private patient information, (III) Health Insurance
    Portability Accountability Act (“HIPAA”) violations against St. Francis, and
    (IV) negligence, invasion of privacy & public disclosure of private facts against
    Collins and Hensley for accessing, reviewing, and disseminating Hayden’s
    private and confidential medical records.
    [5]   Collins was hired as a registrar at St. Francis Hospital in April 2011.
    Appellant’s Confidential App. Vol. II, p. 72. The job required her to “get
    patient information, register them, verify their insurance, verify their personal
    information, and then enter it in the computer[.]” 
    Id. Collins was
    subject to a
    background check, which showed that Collins had been arrested but not
    convicted for felony theft and misdemeanor conversion while in high school.
    Appellant’s App. Vol. III, p. 175–76. Collins had stolen medicine from
    Walmart and had withdrawn $400 from her father’s bank account. 
    Id. at 132–
    37. Charges in both instances were dismissed. 
    Id. at 137.
    Franciscan did not ask
    Collins about her criminal history in her initial interview, nor in a re-interview
    when she was transferred to St. Francis’s south campus. 
    Id. at 139,
    144, 155.
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019       Page 3 of 18
    [6]   Cory Baute (“Baute”), Franciscan’s Chief HR and Support Services Executive
    for Franciscan Health’s Central Indiana Division, signed an affidavit stating
    that nothing in Collins’s application or background would or should have
    precluded her employment as a registrar at St. Francis. Appellant’s Confidential
    App. Vol. II, p. 97. Baute did not work for Franciscan in 2011 when Collins
    was hired but testified that the hiring practices in 2011 were “generally the same
    as they are now.” Appellant’s App. Vol. III, p. 180.
    [7]   Franciscan also presented Linda Fletcher (“Fletcher”), the Hospital’s
    Information Security Officer, to testify about HIPAA compliance, patient
    privacy, and the security of electronic medical records. Appellant’s App. Vol.
    III, p. 119. Fletcher testified that background checks assist with HIPAA
    compliance and are one of the controls Franciscan uses to ensure “staff are
    appropriate to handle the [protected health] information.” 
    Id. at 121.
    When
    asked whether certain backgrounds are disqualifying, Fletcher responded, “That
    would be handled at the St. Francis level within HR. . . they run the
    background checks and they’re responsible for the criteria used to qualify and
    disqualify people.” 
    Id. at 122.
    She did not know what criteria the HR
    departments use but testified that disqualifying backgrounds would presumably
    include any abuse of private health information, criminal background, and
    tendency for fraud and abuse. 
    Id. at 122–23.
    When asked whether a history of
    theft would be disqualifying, Fletcher responded, “It depends on the theft, I
    guess.” 
    Id. at 124.
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019     Page 4 of 18
    [8]   Once hired, Collins was required to undergo HIPAA training. After completing
    training, Collins signed the General Orientation Agreement, which provided
    that she had “received and underst[ood] the information regarding the Health
    Insurance Portability and Accountability Act of 1996 (HIPAA) regulations and
    hospital[] policies and procedures regarding Safety, Security, PI, and Patient
    Rights as presented during and contained in the General Orientation
    Handbook.” Appellant’s Confidential App. Vol. II, p. 80. She also signed an
    acknowledgment affirming her understanding that she may only “use and
    access information that is needed to perform [her] job duties, and inappropriate
    use or disclosure of information on [her] part may result in legal action,
    including personal liability.” 
    Id. at 81.
    [9]   Collins also received regular trainings, including classes on HIPAA
    compliance, patient privacy and security, and appropriate access to and usage
    of medical records, and periodically took tests about patient privacy. 
    Id. at 83.
    Supervisors were near Collins’s work area and made regular rounds to check on
    the registrars. 
    Id. Annual audits
    analyzed the online activities of the registrars.
    
    Id. Collins testified
    that she had been trained and educated by Franciscan and
    was aware of appropriate and inappropriate access of patient records.
    Appellant’s App. Vol. III, p. 158. She also knew that accessing and forwarding
    medical records to outside parties was against hospital policy. 
    Id. at 159.
    Collins
    voluntarily resigned in February 2014. Appellant’s Confidential App. Vol. II, p.
    72.
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019        Page 5 of 18
    [10]   Collins filed a motion for summary judgment on September 1, 2017 in which
    Franciscan joined. The court granted partial summary judgment on Count III,
    finding that Hayden had no private right of action under HIPAA. Franciscan
    filed a subsequent motion for summary judgment on April 5, 2018. Collins filed
    an amended answer and response in order to admit accessing Hayden’s private
    patient information on November 29, 2013. Franciscan asked that Collins’s
    amended answer and responses be considered as part of its pending motion for
    summary judgment. The Court granted the motion for summary judgment.
    Hayden now appeals.
    Standard of Review
    [11]   A trial court should grant a motion for summary judgment only when the
    evidence shows that there is no genuine issue as to any material fact and that
    the moving party is entitled to a judgment as a matter of law. Altevogt v. Brand,
    
    963 N.E.2d 1146
    , 1150 (Ind. Ct. App. 2012) (citing Ind. Trial Rule 56(C)). The
    trial court’s grant of a motion for summary judgment is “cloaked with a
    presumption of validity.” 
    Id. In reviewing
    a trial court’s summary judgment
    motion, an appellate court applies a de novo standard of review. Alldredge v.
    Good Samaritan Home, Inc., 
    9 N.E.3d 1257
    , 1259 (Ind. 2014).
    [12]   Here, the trial court made findings of fact and conclusions of law in support of
    its entry of summary judgment. We are not bound by the trial court’s findings
    and conclusions. 
    Altevogt, 963 N.E.2d at 1150
    .
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019      Page 6 of 18
    Discussion and Decision
    [13]   Hayden argues that the trial court improperly granted summary judgment to
    Franciscan. Hayden raises four issues on appeal that we consolidate and restate
    as two issues. First, she argues that summary judgment should not have been
    granted on Franciscan’s respondeat superior claim. Second, she argues the trial
    court erroneously granted summary judgment to Franciscan on negligent
    hiring, retention, monitoring, supervision, and training.
    I. Respondeat Superior
    [14]   Hayden first claims that Franciscan is liable for Collins’s actions under
    respondeat superior. Appellant’s Br. at 23. An employer is liable for an
    employee’s tortious acts under respondeat superior only if those acts occurred
    within the scope of employment. Cox v. Evansville Police Department, 
    107 N.E.3d 453
    , 460 (Ind. 2018). An employee acts within the scope of employment when
    an act furthers the employer’s business to an appreciable extent or is incidental
    to authorized conduct. Walgreen Co. v. Hinchy, 
    21 N.E.3d 99
    , 107 (Ind. Ct. App.
    2014). An act is incidental to authorized conduct when it is “subordinate to or
    pertinent to an act which the [employee] is employed to perform[.]” 
    Id. (quoting Bushong
    v. Williamson, 
    790 N.E.2d 467
    , 473 (Ind. 2003)).
    [15]   Employers are not responsible for acts that are unauthorized, or acts done “on
    the employee’s own initiative, [] with no intention to perform it as part of or
    incident to the service for which he is employed.” Doe v. Lafayette School Corp.,
    
    846 N.E.2d 691
    , 702 (Ind. Ct. App. 2006), abrogated on other grounds by State
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019         Page 7 of 18
    Farm Mut. Auto. Ins. Co. v. Jakupko, 
    881 N.E.2d 654
    (Ind. 2008) (quoting Stropes
    v. Heritage House Childrens Center, 
    547 N.E.2d 244
    , 247 (Ind. 1989)). An
    employer may still be liable when an employee acts partially in self-interest and
    partially in the employer’s interest. 
    Id. at 701–02.
    The scope of employment
    “may include acts that the employer expressly forbids; that violate the
    employer’s rules, orders, or instructions; that the employee commits for self-
    gratification or self-benefit; that breach a sacred professional duty; or that are
    egregious, malicious, or criminal.” 
    Cox, 107 N.E.3d at 461
    .
    [16]   Hayden cites to Walgreen Co. v. Hinchy, where the court denied summary
    judgment on the issue of vicarious liability when a pharmacist reviewed and
    shared a customer’s prescription profile with a third party. The pharmacist was
    “authorized to use the Walgreen computer system and printer, handle
    prescriptions for Walgreen customers, look up customer information on the
    Walgreen computer system, review patient prescription histories, and make
    prescription-related printouts.” 
    Hinchy, 21 N.E.3d at 108
    . The pharmacist was
    at work and using Walgreen equipment when the actions occurred, and much
    of her conduct was of the same general nature as her ordinary job duties
    authorized by her employer. Even though some of her actions were
    unauthorized, the question of vicarious liability was a question for the jury.2
    2
    Hayden’s additional citation to Cox, 
    107 N.E.3d 453
    , is unhelpful. The Indiana Supreme Court specifically
    noted the “unique institutional prerogatives of [] police employment” in deciding that the question of
    vicarious liability for the sexual assault of a woman in police custody was a question for the 
    jury. 107 N.E.3d at 464
    . Cox expanded liability because police officers wield “broad authority and intimidating power” that
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019                               Page 8 of 18
    [17]   Franciscan cites to two cases in contrast to Hinchy. First, Franciscan points to
    Doe v. Lafayette School Corp., where the court affirmed summary judgment for a
    school corporation on the issue of vicarious liability for a teacher’s sexual
    molestation of a student. 
    846 N.E.2d 691
    . The teacher sent emails to the
    student during and after school hours using his school-provided laptop. 
    Id. at 695.
    His actions were outside the scope of employment because he was not
    authorized to send personal emails to students or to pursue a romantic
    relationship with a student. 
    Id. at 702.
    The teacher’s actions were “fueled
    entirely by self-interest in a romantic relationship with [the student]” rather
    than “incident to any service provided by [the school corporation.]” 
    Id. [18] Franciscan
    also directs the court to Robbins v. Trustees of Indiana University, 
    45 N.E.3d 1
    (Ind. Ct. App. 2015) where the court affirmed summary judgment for
    a hospital on the issue of vicarious liability. The hospital was not vicariously
    liable when a nurse accessed and posted confidential medical records on an
    internet blog. The nurse signed a confidentiality agreement at the start of her
    employment, which provided the nurse would:
    …only access, use (read, add, change, or delete), or disclose
    information for which [she had] a business reason and [was]
    authorized to do so. At no time [would she] access, use, or
    disclose confidential or sensitive information to any person or
    comes with an “inherent risk of abuse.” 
    Id. at 459,
    463. The public policy behind the Cox extension of the
    doctrine of respondeat superior for law enforcement officials’ conduct does not exist here.
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019                               Page 9 of 18
    third party for a personal, unauthorized, unethical, or illegal
    reason.
    
    Id. at 4.
    Although the nurse was authorized to access patient information, the
    court found that the existence of the confidentiality agreement meant she was
    “expressly not authorized to access, use, or disclose the information for personal,
    unauthorized, unethical, or illegal reasons.” 
    Id. at 10
    (emphasis in original).
    The court also noted that the patient had never been treated in the nurse’s
    department. 
    Id. at 5.
    Her actions were not incident to any service provided by
    her employer but were “motivated entirely by self-interest related to a personal
    relationship” with the patient, and thus the nurse’s actions were outside the
    scope of her employment. 
    Id. at 11.
    Summary judgment on the issue of
    vicarious liability was appropriate.
    [19]   Hayden’s case is more akin to Doe and Robbins rather than to Hinchy. Although
    Collins was authorized to use Franciscan’s computer to look up patient records,
    she was not authorized to do so for personal reasons. As in Robbins, where the
    confidentiality agreement expressly prohibited the nurse form accessing and/or
    disclosing patient records for personal reasons, Collins signed an agreement at
    the onset of her employment that stated she could only “use and access
    information that is needed to perform [her] job duties, and inappropriate use or
    disclosure of information on [her] part may result in legal action, including
    personal liability.” Appellant’s Confidential App. Vol. II, p. 81. There is no
    evidence that the pharmacist in Hinchy signed a confidentiality agreement.
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019       Page 10 of 18
    [20]   Collins accessed Hayden’s records eleven days after Hayden’s visit to the
    Radiology Department. Hayden was not a patient of Franciscan on November
    28 or 29, 2013. Collins thus had no legitimate business need to access Hayden’s
    medical records on November 29, 2013 because Collins did not need to look
    her up for an appointment or to prepare patient records for November 29, 2013.
    Collins’s access to the medical records was expressly not authorized; the
    information was not needed to perform her job duties and thus was not
    sanctioned. In addition, Hayden’s comparison to Hinchy is ultimately untenable
    because there is no evidence that the pharmacist in Hinchy signed a
    confidentiality agreement like the nurse in Robbins or Collins3.
    [21]   We are also unpersuaded by Hayden’s argument that a genuine issue of
    material fact exists because Collins claims that she did not access and
    disseminate Hayden’s medical records. Appellant’s Br. at 34. In her amended
    answer, Collins admitted accessing Hayden’s medical records on November 29,
    2013. Appellant’s App. Vol. IV pp. 80, 84. Collins’s factual admission cannot
    be withdrawn by an earlier statement in a deposition. A judicial admission is
    “an admission in a current pleading or made during the course of trial; it is
    conclusive upon the party making it and relieves the opposing party of the duty
    3
    Hayden also argues that Robbins is inapplicable because the patient in Robbins was not a patient of the
    nurse’s department, the nurse admitted she was not involved in any way with providing any healthcare or
    treatment to the patient or her children, and that the nurse pleaded guilty to a related criminal offense.
    Appellant’s Br. pp. 33–36. In contrast, Hayden was a patient of Collins’s department, and Franciscan has not
    provided any evidence on either of the other two points. However, the factual differences between this case
    and Robbins do not affect our reliance on the legal analysis in Robbins as it relates to whether Hayden was
    acting within the scope of her employment and had signed a confidentiality agreement.
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019                            Page 11 of 18
    to present evidence on that issue.” Weinberger v. Boyer, 
    956 N.E.2d 1095
    , 1105
    (Ind. Ct. App. 2011), trans. denied. An admission in a pleading is conclusive. 
    Id. Collins admitted
    in her answer that she accessed Hayden’s medical records; this
    fact is now settled and cannot be used to survive summary judgment.
    [22]   The trial court properly granted summary judgment to Franciscan on the issue
    of respondeat superior. Franciscan established that Collins accessed the medical
    records for non-employment-related reasons, in direct violation of the
    confidentiality agreement she signed at the onset of her employment with
    Franciscan. Hayden failed to designate any evidence to the contrary. For these
    reasons, Franciscan is entitled to summary judgment as a matter of law.
    II. Negligence
    [23]   Hayden claims that Franciscan is liable for negligently hiring and retaining,
    training, and monitoring and supervising Collins. Negligence claims have three
    elements: (1) a duty owed by the defendant to the plaintiff, (2) a breach of that
    duty and (3) injury to the plaintiff proximately caused by the defendant’s
    breach. Scott v. Retz, 
    916 N.E.2d 252
    , 257 (Ind. Ct. App. 2009).
    A.      Hiring and Retention
    [24]   Indiana courts recognize a tort of negligent hiring and retention of an
    employee. Konkle v. Henson, 
    672 N.E.2d 450
    , 454 (Ind. Ct. App. 1996). Indiana
    has adopted the Restatement (Second) of Torts section 317, which provides:
    A master is under a duty to exercise reasonable care so to control
    his servant while acting outside the scope of his employment as
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019       Page 12 of 18
    to prevent him from intentionally harming others or from so
    conducting himself as to create an unreasonable risk of bodily
    harm to them, if (a) the servant (i) is upon the premises in
    possession of the master or upon which the servant is privileged
    to enter only as his servant, or (ii) is using a chattel of the master,
    and (b) the master (i) knows or has reason to know that he has
    the ability to control his servant, and (ii) knows or should know
    of the necessity and opportunity for exercising such control.
    [25]   It is undisputed that Collins was an employee of Franciscan and was on
    Franciscan’s premises when the unauthorized access occurred. At summary
    judgment, it was Franciscan’s burden to show it had no reason to know of its
    need to control Collins. See Hudgins v. Bemish, 
    64 N.E.3d 923
    , 933–934 (Ind. Ct.
    App. 2016). In an action for the negligent retention of an employee, evidence of
    prior similar actions committed by an employee is often admissible to establish
    the employer’s actual or constructive knowledge of the employee’s propensity
    to commit a later act. Frye v. Am. Painting Co., 642 NE.2d 995, 999 (Ind. Ct
    App. 1994) (citing Tindall v. Enderle, 
    162 Ind. App. 524
    , 527, 
    320 N.E.2d 764
    ,
    767 (Ind. Ct. App. 1974)).
    [26]   Franciscan points to Robbins, where the nurse’s background check yielded that
    she had a misdemeanor battery conviction and dismissed charges for class A
    misdemeanor criminal mischief, driving while suspended, and a probation
    violation. 
    45 N.E.3d 1
    at 4. This court held that the nurse’s violation of medical
    confidentiality “did not constitute a recurrence of criminal behavior for which
    [she] had earlier been convicted. Specifically, there were no prior reports of
    [her] accessing and publishing any other patient’s confidential medical
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019          Page 13 of 18
    records.” 
    Id. at 12.
    Under these circumstances, the patient was not a reasonably
    foreseeable victim and the nurse’s posting of information was not a reasonably
    foreseeable harm.4 
    Id. [27] The
    present case is similar to Robbins. Collins was vetted through her
    application for employment, interview, and criminal background check.
    Collins’s background check indicated she had two arrests, but the charges in
    both cases were dismissed. Her previous arrests were for stealing medicine from
    Walmart and stealing $400 from her father six years before her employment
    with Franciscan. She had no history of accessing and publishing confidential
    medical records or other sensitive information.
    [28]   Cory Baute (“Baute”), Franciscan’s Human Resources manager, testified that
    nothing in Collins’s background would raise a red flag or prevent her from
    being hired. Hayden argues that Baute’s affidavit is defective because he could
    not be “100 percent certain” about the hiring processes utilized in 2011 because
    he was not at Franciscan at the time. Appellant’s Br. at 43; Appellant’s App.
    4
    Hayden’s attempts to compare Frye to the present case are unavailing. In Frye, the painter committed his
    first crime while already employed at the painting company and fled the scene of the first crime in the painting
    company’s van; the painting company then provided him with representation and legal advice. 642 NE.2d
    995 at 997. He then committed an almost identical crime at the home of a customer. 
    Id. The questions
    of
    whether the painter posed a threat to customers and whether the company breached its duty to its customers
    by retaining the painter was a question for the jury. 
    Id. at 999.
    In contrast, Collins’s arrests happened six years
    before she was hired at Franciscan. Her previous crimes were instances of theft, not of accessing private
    patient information.
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019                                  Page 14 of 18
    Vol. III, p. 180. However, Baute did testify that the processes were “generally
    the same as they are now.” Appellant’s App. Vol. III, p. 180.
    [29]   Hayden attempts to show that there remain issues of material fact by
    contrasting the testimony of Baute with the testimony of Linda Fletcher
    (“Fletcher”), Franciscan’s patient privacy director. Appellant’s Br. at 45–46.
    Fletcher testified that a criminal background would be a disqualifying
    background for HIPAA compliance. Appellant’s App. Vol. III, pp. 123–24.
    Hayden thus argues that Collins’s hiring and retention was negligent due to
    Collins’s prior arrests.
    [30]   This is an inaccurate characterization of Fletcher’s testimony. Fletcher testified
    that background checks assist with HIPAA compliance but that she did not
    know what a disqualifying background would be, because background checks
    are “handled at the St. Francis level within HR…they run the background
    checks and they’re responsible for the criteria used to qualify and disqualify
    people.” 
    Id. at 122.
    Fletcher herself stated that she was not an expert on
    background checks; HR employees such as Baute are. Fletcher’s testimony thus
    does not contradict Baute’s expert testimony.
    [31]   Franciscan designated evidence establishing that Franciscan did not negligently
    hire and retain Collins. Hayden failed to designate evidence sufficient to create
    a genuine issue of material fact. Summary judgment was therefore appropriate
    on the issue of negligent hiring and retention.
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019      Page 15 of 18
    B.      Training
    [32]   Next, Hayden argues that genuine issues of material fact preclude the entry of
    summary judgment on the issue of negligent training. We disagree.
    [33]   Sharla D. Rhodes (“Rhodes”), Franciscan’s Director of Patient Access, testified
    that Collins went through orientation when she was hired at the hospital, and
    that her orientation included training on patient privacy and confidentiality of
    medical records. Appellant’s Confidential App. Vol. II, p. 83. She further
    testified that Collins received regular training throughout her employment,
    including classes on patient privacy and appropriate access to medical records.
    
    Id. Collins herself
    testified that she had been trained and educated by the
    Hospital:
    Q: As a result of your training and education provided to you as
    an employee of St. Francis, were you aware of appropriate and
    inappropriate access, viewing and use of information contained
    within patient medical records?
    A: Yes.
    Q: Okay. And so if you accessed records you weren’t supposed to,
    you knew that was wrong?
    A: Yes.
    Appellant’s App. Vol. III, p. 158. Construing the facts most favorably for the
    non-moving party, the facts show that Franciscan provides training to
    employees on HIPAA, patient privacy, and appropriate access to medical
    records at the onset of and throughout employment. These facts also
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019      Page 16 of 18
    demonstrate that Collins knew in what instances access to medical records was
    appropriate and in what instances access was improper.
    [34]   Hayden failed to designate any evidence creating a genuine issue of material
    fact on the issue of negligent training. Summary judgment was therefore
    properly granted to Franciscan on this issue.
    C.      Negligent monitoring and supervision
    [35]   Finally, Hayden argues that Franciscan failed to meet its burden to prove that
    Collins was properly monitored and supervised. In support of her argument,
    Hayden relies on the affidavit of Rhodes, Franciscan’s Director of Patient
    Access.
    [36]   Testimony shows that supervisors were near Collins’s work area and made
    regular rounds checking on the status of the registrars. Appellant’s Confidential
    App. Vol. II, p. 83; Appellant’s App. Vol. III pp. 151–52. Supervisors were able
    to monitor the computers used by each registrar and perform annual audits that
    analyzed the online activities of the registrars. Appellant’s Confidential App.
    Vol. II, p. 83. Collins herself testified that “there was always a manager there”
    and that she believed that “all managers could see what the employees were
    doing.” Appellant’s App. Vol. III, pp. 151–52. Franciscan designated evidence
    that they did not breach a duty to their patients.5
    5
    Hayden argues that several statements in Rhodes’s affidavit should have been struck. Hayden argues
    that Rhodes is not an expert because Rhodes identified herself as a “master gardener” rather than an
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019                      Page 17 of 18
    [37]   Hayden also argues that Rhodes’s testimony does not establish that Franciscan
    properly supervised and managed employees because she could not specifically
    testify whether supervisors had been making rounds on November 29, 2013.
    This is an inaccurate characterization of Rhodes’s testimony. Rhodes testified
    that Collins was not supervised differently than any other registrar at
    Franciscan, and she was properly supervised based on Franciscan’s standards.
    
    Id. at 112.
    Rhodes clarified that the registrar’s role is “very independent. There’s
    not a reason for somebody to stand over them all the time unless they ask for
    assistance or they need support with something[.]” 
    Id. at 91.
    Rhodes’s affidavit
    and testimony are not deficient.
    Conclusion
    [38]   Hayden failed to establish any genuine issue of material fact. The trial court
    appropriately granted summary judgment to Franciscan on the issues of
    respondeat superior and negligence.
    [39]   Affirmed.
    May, J., and Brown, J., concur.
    expert in training individuals in privacy and protected health information. 
    Id. at 71–73,
    107–108.
    However, Rhodes testified that she has expertise in training registrars and that she helps others learn the
    Epic System. 
    Id. at 10
    7–08. She has applicable training to be considered an expert and to satisfy
    Indiana Evidence Rule 702.
    Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019                           Page 18 of 18