Leslie D. Hayden v. Franciscan Alliance, Inc.

FILED Aug 19 2019, 9:09 am CLERK Indiana Supreme Court Court of Appeals and Tax Court ATTORNEYS FOR APPELLANT ATTORNEYS FOR APPELLEE Robert D. King, Jr. Christopher L. Riegler David R. Thompson Kimberly E. Schroder Indianapolis, Indiana Patricia B. Freije Katz Korin Cunningham, P.C. Indianapolis, Indiana IN THE COURT OF APPEALS OF INDIANA Leslie D. Hayden, August 19, 2019 Appellant-Plaintiff, Court of Appeals Case No. 18A-CT-1777 v. Appeal from the Marion Superior Court Franciscan Alliance, Inc.,1 The Honorable Michael D. Keele, Appellee-Defendant. Judge Trial Court Cause No. 49D07-1511-CT-39310 Mathias, Judge. [1] Franciscan Alliance, Inc. (“Franciscan”) filed a motion for summary judgment on the issues of respondeat superior and negligent hiring and retention of an 1 Brooke Collins and Jessica M. Hensley have not filed appellate briefs. However, pursuant to Indiana Appellate Rule 17(A), a party of record in the trial court shall be a party on appeal. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 1 of 18 employee on April 5, 2018. Marion Superior Court granted summary judgment for Franciscan on July 6, 2018. Leslie Hayden (“Hayden”) now appeals, arguing there are issues of material fact that preclude summary judgment. We affirm. Facts and Procedural History [2] On November 18, 2013, Hayden had x-rays taken at St. Francis Hospital’s Radiology Department for a broken arm. Appellant’s App. Vol. III, pp. 54–56. Two years later, in 2015, Jessica Hensley (“Hensley”) texted a screenshot of Hayden’s confidential medical records to Hayden’s boyfriend, and posted the records on Facebook. Id. at 53; Appellant’s App. Vol. I, p. 137. Hayden recalled that Brooke Collins (“Collins”), Hensley’s best friend, worked as a registrar in the St. Francis Hospital Radiology Department, where Hayden received treatment in 2013. Appellant’s App. Vol. III, p. 59. Hayden had a complex and acrimonious relationship with Hensley and Collins that dated back to high school. Appellant’s App. Vol. I, pp. 125, 128, 149. [3] Hayden contacted the hospital’s Administrative Director of Compliance and Privacy in July 2015 to ask for an audit of her medical account. Appellant’s App. Vol. III, pp. 57, 163. The hospital found that Collins’s password was used to access Hayden’s account on November 29, 2013, eleven days after Hayden received treatment for her broken arm. Appellant’s App. Vol. I, pp. 81–82. Hayden was not a patient of Franciscan on November 29 when Collins’s password was used to access her account. Franciscan concluded that Collins’s access was unauthorized and improper. Appellant’s App. Vol. III, p. 191. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 2 of 18 Collins has since admitted to accessing Hayden’s private patient information on November 29, 2013. Appellant’s App. Vol. IV, p. 84. [4] On November 25, 2015, Hayden brought suit against Hensley, Collins, and Franciscan. A fourth defendant, Southside OB-GYN, P.C. was also named but later dismissed by stipulation. Appellant’s App. Vol. I, p. 11. Hayden alleged (I) respondeat superior against Franciscan for the acts of Collins, (II) negligence against Franciscan in failing to have appropriate prophylactic structures and systems in place to safeguard private patient information, (III) Health Insurance Portability Accountability Act (“HIPAA”) violations against St. Francis, and (IV) negligence, invasion of privacy & public disclosure of private facts against Collins and Hensley for accessing, reviewing, and disseminating Hayden’s private and confidential medical records. [5] Collins was hired as a registrar at St. Francis Hospital in April 2011. Appellant’s Confidential App. Vol. II, p. 72. The job required her to “get patient information, register them, verify their insurance, verify their personal information, and then enter it in the computer[.]” Id. Collins was subject to a background check, which showed that Collins had been arrested but not convicted for felony theft and misdemeanor conversion while in high school. Appellant’s App. Vol. III, p. 175–76. Collins had stolen medicine from Walmart and had withdrawn $400 from her father’s bank account. Id. at 132– 37. Charges in both instances were dismissed. Id. at 137. Franciscan did not ask Collins about her criminal history in her initial interview, nor in a re-interview when she was transferred to St. Francis’s south campus. Id. at 139, 144, 155. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 3 of 18 [6] Cory Baute (“Baute”), Franciscan’s Chief HR and Support Services Executive for Franciscan Health’s Central Indiana Division, signed an affidavit stating that nothing in Collins’s application or background would or should have precluded her employment as a registrar at St. Francis. Appellant’s Confidential App. Vol. II, p. 97. Baute did not work for Franciscan in 2011 when Collins was hired but testified that the hiring practices in 2011 were “generally the same as they are now.” Appellant’s App. Vol. III, p. 180. [7] Franciscan also presented Linda Fletcher (“Fletcher”), the Hospital’s Information Security Officer, to testify about HIPAA compliance, patient privacy, and the security of electronic medical records. Appellant’s App. Vol. III, p. 119. Fletcher testified that background checks assist with HIPAA compliance and are one of the controls Franciscan uses to ensure “staff are appropriate to handle the [protected health] information.” Id. at 121. When asked whether certain backgrounds are disqualifying, Fletcher responded, “That would be handled at the St. Francis level within HR. . . they run the background checks and they’re responsible for the criteria used to qualify and disqualify people.” Id. at 122. She did not know what criteria the HR departments use but testified that disqualifying backgrounds would presumably include any abuse of private health information, criminal background, and tendency for fraud and abuse. Id. at 122–23. When asked whether a history of theft would be disqualifying, Fletcher responded, “It depends on the theft, I guess.” Id. at 124. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 4 of 18 [8] Once hired, Collins was required to undergo HIPAA training. After completing training, Collins signed the General Orientation Agreement, which provided that she had “received and underst[ood] the information regarding the Health Insurance Portability and Accountability Act of 1996 (HIPAA) regulations and hospital[] policies and procedures regarding Safety, Security, PI, and Patient Rights as presented during and contained in the General Orientation Handbook.” Appellant’s Confidential App. Vol. II, p. 80. She also signed an acknowledgment affirming her understanding that she may only “use and access information that is needed to perform [her] job duties, and inappropriate use or disclosure of information on [her] part may result in legal action, including personal liability.” Id. at 81. [9] Collins also received regular trainings, including classes on HIPAA compliance, patient privacy and security, and appropriate access to and usage of medical records, and periodically took tests about patient privacy. Id. at 83. Supervisors were near Collins’s work area and made regular rounds to check on the registrars. Id. Annual audits analyzed the online activities of the registrars. Id. Collins testified that she had been trained and educated by Franciscan and was aware of appropriate and inappropriate access of patient records. Appellant’s App. Vol. III, p. 158. She also knew that accessing and forwarding medical records to outside parties was against hospital policy. Id. at 159. Collins voluntarily resigned in February 2014. Appellant’s Confidential App. Vol. II, p. 72. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 5 of 18 [10] Collins filed a motion for summary judgment on September 1, 2017 in which Franciscan joined. The court granted partial summary judgment on Count III, finding that Hayden had no private right of action under HIPAA. Franciscan filed a subsequent motion for summary judgment on April 5, 2018. Collins filed an amended answer and response in order to admit accessing Hayden’s private patient information on November 29, 2013. Franciscan asked that Collins’s amended answer and responses be considered as part of its pending motion for summary judgment. The Court granted the motion for summary judgment. Hayden now appeals. Standard of Review [11] A trial court should grant a motion for summary judgment only when the evidence shows that there is no genuine issue as to any material fact and that the moving party is entitled to a judgment as a matter of law. Altevogt v. Brand, 963 N.E.2d 1146, 1150 (Ind. Ct. App. 2012) (citing Ind. Trial Rule 56(C)). The trial court’s grant of a motion for summary judgment is “cloaked with a presumption of validity.” Id. In reviewing a trial court’s summary judgment motion, an appellate court applies a de novo standard of review. Alldredge v. Good Samaritan Home, Inc., 9 N.E.3d 1257, 1259 (Ind. 2014). [12] Here, the trial court made findings of fact and conclusions of law in support of its entry of summary judgment. We are not bound by the trial court’s findings and conclusions. Altevogt, 963 N.E.2d at 1150. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 6 of 18 Discussion and Decision [13] Hayden argues that the trial court improperly granted summary judgment to Franciscan. Hayden raises four issues on appeal that we consolidate and restate as two issues. First, she argues that summary judgment should not have been granted on Franciscan’s respondeat superior claim. Second, she argues the trial court erroneously granted summary judgment to Franciscan on negligent hiring, retention, monitoring, supervision, and training. I. Respondeat Superior [14] Hayden first claims that Franciscan is liable for Collins’s actions under respondeat superior. Appellant’s Br. at 23. An employer is liable for an employee’s tortious acts under respondeat superior only if those acts occurred within the scope of employment. Cox v. Evansville Police Department, 107 N.E.3d 453, 460 (Ind. 2018). An employee acts within the scope of employment when an act furthers the employer’s business to an appreciable extent or is incidental to authorized conduct. Walgreen Co. v. Hinchy, 21 N.E.3d 99, 107 (Ind. Ct. App. 2014). An act is incidental to authorized conduct when it is “subordinate to or pertinent to an act which the [employee] is employed to perform[.]” Id. (quoting Bushong v. Williamson, 790 N.E.2d 467, 473 (Ind. 2003)). [15] Employers are not responsible for acts that are unauthorized, or acts done “on the employee’s own initiative, [] with no intention to perform it as part of or incident to the service for which he is employed.” Doe v. Lafayette School Corp., 846 N.E.2d 691, 702 (Ind. Ct. App. 2006), abrogated on other grounds by State Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 7 of 18 Farm Mut. Auto. Ins. Co. v. Jakupko, 881 N.E.2d 654 (Ind. 2008) (quoting Stropes v. Heritage House Childrens Center, 547 N.E.2d 244, 247 (Ind. 1989)). An employer may still be liable when an employee acts partially in self-interest and partially in the employer’s interest. Id. at 701–02. The scope of employment “may include acts that the employer expressly forbids; that violate the employer’s rules, orders, or instructions; that the employee commits for self- gratification or self-benefit; that breach a sacred professional duty; or that are egregious, malicious, or criminal.” Cox, 107 N.E.3d at 461. [16] Hayden cites to Walgreen Co. v. Hinchy, where the court denied summary judgment on the issue of vicarious liability when a pharmacist reviewed and shared a customer’s prescription profile with a third party. The pharmacist was “authorized to use the Walgreen computer system and printer, handle prescriptions for Walgreen customers, look up customer information on the Walgreen computer system, review patient prescription histories, and make prescription-related printouts.” Hinchy, 21 N.E.3d at 108. The pharmacist was at work and using Walgreen equipment when the actions occurred, and much of her conduct was of the same general nature as her ordinary job duties authorized by her employer. Even though some of her actions were unauthorized, the question of vicarious liability was a question for the jury.2 2 Hayden’s additional citation to Cox, 107 N.E.3d 453, is unhelpful. The Indiana Supreme Court specifically noted the “unique institutional prerogatives of [] police employment” in deciding that the question of vicarious liability for the sexual assault of a woman in police custody was a question for the jury. 107 N.E.3d at 464. Cox expanded liability because police officers wield “broad authority and intimidating power” that Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 8 of 18 [17] Franciscan cites to two cases in contrast to Hinchy. First, Franciscan points to Doe v. Lafayette School Corp., where the court affirmed summary judgment for a school corporation on the issue of vicarious liability for a teacher’s sexual molestation of a student. 846 N.E.2d 691. The teacher sent emails to the student during and after school hours using his school-provided laptop. Id. at 695. His actions were outside the scope of employment because he was not authorized to send personal emails to students or to pursue a romantic relationship with a student. Id. at 702. The teacher’s actions were “fueled entirely by self-interest in a romantic relationship with [the student]” rather than “incident to any service provided by [the school corporation.]” Id. [18] Franciscan also directs the court to Robbins v. Trustees of Indiana University, 45 N.E.3d 1 (Ind. Ct. App. 2015) where the court affirmed summary judgment for a hospital on the issue of vicarious liability. The hospital was not vicariously liable when a nurse accessed and posted confidential medical records on an internet blog. The nurse signed a confidentiality agreement at the start of her employment, which provided the nurse would: …only access, use (read, add, change, or delete), or disclose information for which [she had] a business reason and [was] authorized to do so. At no time [would she] access, use, or disclose confidential or sensitive information to any person or comes with an “inherent risk of abuse.” Id. at 459, 463. The public policy behind the Cox extension of the doctrine of respondeat superior for law enforcement officials’ conduct does not exist here. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 9 of 18 third party for a personal, unauthorized, unethical, or illegal reason. Id. at 4. Although the nurse was authorized to access patient information, the court found that the existence of the confidentiality agreement meant she was “expressly not authorized to access, use, or disclose the information for personal, unauthorized, unethical, or illegal reasons.” Id. at 10 (emphasis in original). The court also noted that the patient had never been treated in the nurse’s department. Id. at 5. Her actions were not incident to any service provided by her employer but were “motivated entirely by self-interest related to a personal relationship” with the patient, and thus the nurse’s actions were outside the scope of her employment. Id. at 11. Summary judgment on the issue of vicarious liability was appropriate. [19] Hayden’s case is more akin to Doe and Robbins rather than to Hinchy. Although Collins was authorized to use Franciscan’s computer to look up patient records, she was not authorized to do so for personal reasons. As in Robbins, where the confidentiality agreement expressly prohibited the nurse form accessing and/or disclosing patient records for personal reasons, Collins signed an agreement at the onset of her employment that stated she could only “use and access information that is needed to perform [her] job duties, and inappropriate use or disclosure of information on [her] part may result in legal action, including personal liability.” Appellant’s Confidential App. Vol. II, p. 81. There is no evidence that the pharmacist in Hinchy signed a confidentiality agreement. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 10 of 18 [20] Collins accessed Hayden’s records eleven days after Hayden’s visit to the Radiology Department. Hayden was not a patient of Franciscan on November 28 or 29, 2013. Collins thus had no legitimate business need to access Hayden’s medical records on November 29, 2013 because Collins did not need to look her up for an appointment or to prepare patient records for November 29, 2013. Collins’s access to the medical records was expressly not authorized; the information was not needed to perform her job duties and thus was not sanctioned. In addition, Hayden’s comparison to Hinchy is ultimately untenable because there is no evidence that the pharmacist in Hinchy signed a confidentiality agreement like the nurse in Robbins or Collins3. [21] We are also unpersuaded by Hayden’s argument that a genuine issue of material fact exists because Collins claims that she did not access and disseminate Hayden’s medical records. Appellant’s Br. at 34. In her amended answer, Collins admitted accessing Hayden’s medical records on November 29, 2013. Appellant’s App. Vol. IV pp. 80, 84. Collins’s factual admission cannot be withdrawn by an earlier statement in a deposition. A judicial admission is “an admission in a current pleading or made during the course of trial; it is conclusive upon the party making it and relieves the opposing party of the duty 3 Hayden also argues that Robbins is inapplicable because the patient in Robbins was not a patient of the nurse’s department, the nurse admitted she was not involved in any way with providing any healthcare or treatment to the patient or her children, and that the nurse pleaded guilty to a related criminal offense. Appellant’s Br. pp. 33–36. In contrast, Hayden was a patient of Collins’s department, and Franciscan has not provided any evidence on either of the other two points. However, the factual differences between this case and Robbins do not affect our reliance on the legal analysis in Robbins as it relates to whether Hayden was acting within the scope of her employment and had signed a confidentiality agreement. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 11 of 18 to present evidence on that issue.” Weinberger v. Boyer, 956 N.E.2d 1095, 1105 (Ind. Ct. App. 2011), trans. denied. An admission in a pleading is conclusive. Id. Collins admitted in her answer that she accessed Hayden’s medical records; this fact is now settled and cannot be used to survive summary judgment. [22] The trial court properly granted summary judgment to Franciscan on the issue of respondeat superior. Franciscan established that Collins accessed the medical records for non-employment-related reasons, in direct violation of the confidentiality agreement she signed at the onset of her employment with Franciscan. Hayden failed to designate any evidence to the contrary. For these reasons, Franciscan is entitled to summary judgment as a matter of law. II. Negligence [23] Hayden claims that Franciscan is liable for negligently hiring and retaining, training, and monitoring and supervising Collins. Negligence claims have three elements: (1) a duty owed by the defendant to the plaintiff, (2) a breach of that duty and (3) injury to the plaintiff proximately caused by the defendant’s breach. Scott v. Retz, 916 N.E.2d 252, 257 (Ind. Ct. App. 2009). A. Hiring and Retention [24] Indiana courts recognize a tort of negligent hiring and retention of an employee. Konkle v. Henson, 672 N.E.2d 450, 454 (Ind. Ct. App. 1996). Indiana has adopted the Restatement (Second) of Torts section 317, which provides: A master is under a duty to exercise reasonable care so to control his servant while acting outside the scope of his employment as Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 12 of 18 to prevent him from intentionally harming others or from so conducting himself as to create an unreasonable risk of bodily harm to them, if (a) the servant (i) is upon the premises in possession of the master or upon which the servant is privileged to enter only as his servant, or (ii) is using a chattel of the master, and (b) the master (i) knows or has reason to know that he has the ability to control his servant, and (ii) knows or should know of the necessity and opportunity for exercising such control. [25] It is undisputed that Collins was an employee of Franciscan and was on Franciscan’s premises when the unauthorized access occurred. At summary judgment, it was Franciscan’s burden to show it had no reason to know of its need to control Collins. See Hudgins v. Bemish, 64 N.E.3d 923, 933–934 (Ind. Ct. App. 2016). In an action for the negligent retention of an employee, evidence of prior similar actions committed by an employee is often admissible to establish the employer’s actual or constructive knowledge of the employee’s propensity to commit a later act. Frye v. Am. Painting Co., 642 NE.2d 995, 999 (Ind. Ct App. 1994) (citing Tindall v. Enderle, 162 Ind. App. 524, 527, 320 N.E.2d 764, 767 (Ind. Ct. App. 1974)). [26] Franciscan points to Robbins, where the nurse’s background check yielded that she had a misdemeanor battery conviction and dismissed charges for class A misdemeanor criminal mischief, driving while suspended, and a probation violation. 45 N.E.3d 1 at 4. This court held that the nurse’s violation of medical confidentiality “did not constitute a recurrence of criminal behavior for which [she] had earlier been convicted. Specifically, there were no prior reports of [her] accessing and publishing any other patient’s confidential medical Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 13 of 18 records.” Id. at 12. Under these circumstances, the patient was not a reasonably foreseeable victim and the nurse’s posting of information was not a reasonably foreseeable harm.4 Id. [27] The present case is similar to Robbins. Collins was vetted through her application for employment, interview, and criminal background check. Collins’s background check indicated she had two arrests, but the charges in both cases were dismissed. Her previous arrests were for stealing medicine from Walmart and stealing $400 from her father six years before her employment with Franciscan. She had no history of accessing and publishing confidential medical records or other sensitive information. [28] Cory Baute (“Baute”), Franciscan’s Human Resources manager, testified that nothing in Collins’s background would raise a red flag or prevent her from being hired. Hayden argues that Baute’s affidavit is defective because he could not be “100 percent certain” about the hiring processes utilized in 2011 because he was not at Franciscan at the time. Appellant’s Br. at 43; Appellant’s App. 4 Hayden’s attempts to compare Frye to the present case are unavailing. In Frye, the painter committed his first crime while already employed at the painting company and fled the scene of the first crime in the painting company’s van; the painting company then provided him with representation and legal advice. 642 NE.2d 995 at 997. He then committed an almost identical crime at the home of a customer. Id. The questions of whether the painter posed a threat to customers and whether the company breached its duty to its customers by retaining the painter was a question for the jury. Id. at 999. In contrast, Collins’s arrests happened six years before she was hired at Franciscan. Her previous crimes were instances of theft, not of accessing private patient information. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 14 of 18 Vol. III, p. 180. However, Baute did testify that the processes were “generally the same as they are now.” Appellant’s App. Vol. III, p. 180. [29] Hayden attempts to show that there remain issues of material fact by contrasting the testimony of Baute with the testimony of Linda Fletcher (“Fletcher”), Franciscan’s patient privacy director. Appellant’s Br. at 45–46. Fletcher testified that a criminal background would be a disqualifying background for HIPAA compliance. Appellant’s App. Vol. III, pp. 123–24. Hayden thus argues that Collins’s hiring and retention was negligent due to Collins’s prior arrests. [30] This is an inaccurate characterization of Fletcher’s testimony. Fletcher testified that background checks assist with HIPAA compliance but that she did not know what a disqualifying background would be, because background checks are “handled at the St. Francis level within HR…they run the background checks and they’re responsible for the criteria used to qualify and disqualify people.” Id. at 122. Fletcher herself stated that she was not an expert on background checks; HR employees such as Baute are. Fletcher’s testimony thus does not contradict Baute’s expert testimony. [31] Franciscan designated evidence establishing that Franciscan did not negligently hire and retain Collins. Hayden failed to designate evidence sufficient to create a genuine issue of material fact. Summary judgment was therefore appropriate on the issue of negligent hiring and retention. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 15 of 18 B. Training [32] Next, Hayden argues that genuine issues of material fact preclude the entry of summary judgment on the issue of negligent training. We disagree. [33] Sharla D. Rhodes (“Rhodes”), Franciscan’s Director of Patient Access, testified that Collins went through orientation when she was hired at the hospital, and that her orientation included training on patient privacy and confidentiality of medical records. Appellant’s Confidential App. Vol. II, p. 83. She further testified that Collins received regular training throughout her employment, including classes on patient privacy and appropriate access to medical records. Id. Collins herself testified that she had been trained and educated by the Hospital: Q: As a result of your training and education provided to you as an employee of St. Francis, were you aware of appropriate and inappropriate access, viewing and use of information contained within patient medical records? A: Yes. Q: Okay. And so if you accessed records you weren’t supposed to, you knew that was wrong? A: Yes. Appellant’s App. Vol. III, p. 158. Construing the facts most favorably for the non-moving party, the facts show that Franciscan provides training to employees on HIPAA, patient privacy, and appropriate access to medical records at the onset of and throughout employment. These facts also Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 16 of 18 demonstrate that Collins knew in what instances access to medical records was appropriate and in what instances access was improper. [34] Hayden failed to designate any evidence creating a genuine issue of material fact on the issue of negligent training. Summary judgment was therefore properly granted to Franciscan on this issue. C. Negligent monitoring and supervision [35] Finally, Hayden argues that Franciscan failed to meet its burden to prove that Collins was properly monitored and supervised. In support of her argument, Hayden relies on the affidavit of Rhodes, Franciscan’s Director of Patient Access. [36] Testimony shows that supervisors were near Collins’s work area and made regular rounds checking on the status of the registrars. Appellant’s Confidential App. Vol. II, p. 83; Appellant’s App. Vol. III pp. 151–52. Supervisors were able to monitor the computers used by each registrar and perform annual audits that analyzed the online activities of the registrars. Appellant’s Confidential App. Vol. II, p. 83. Collins herself testified that “there was always a manager there” and that she believed that “all managers could see what the employees were doing.” Appellant’s App. Vol. III, pp. 151–52. Franciscan designated evidence that they did not breach a duty to their patients.5 5 Hayden argues that several statements in Rhodes’s affidavit should have been struck. Hayden argues that Rhodes is not an expert because Rhodes identified herself as a “master gardener” rather than an Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 17 of 18 [37] Hayden also argues that Rhodes’s testimony does not establish that Franciscan properly supervised and managed employees because she could not specifically testify whether supervisors had been making rounds on November 29, 2013. This is an inaccurate characterization of Rhodes’s testimony. Rhodes testified that Collins was not supervised differently than any other registrar at Franciscan, and she was properly supervised based on Franciscan’s standards. Id. at 112. Rhodes clarified that the registrar’s role is “very independent. There’s not a reason for somebody to stand over them all the time unless they ask for assistance or they need support with something[.]” Id. at 91. Rhodes’s affidavit and testimony are not deficient. Conclusion [38] Hayden failed to establish any genuine issue of material fact. The trial court appropriately granted summary judgment to Franciscan on the issues of respondeat superior and negligence. [39] Affirmed. May, J., and Brown, J., concur. expert in training individuals in privacy and protected health information. Id. at 71–73, 107–108. However, Rhodes testified that she has expertise in training registrars and that she helps others learn the Epic System. Id. at 107–08. She has applicable training to be considered an expert and to satisfy Indiana Evidence Rule 702. Court of Appeals of Indiana | Opinion 18A-CT-1777 | August 19, 2019 Page 18 of 18