Chapter 3 - The Chief Compliance Officer's Ledger

I met with the hospital’s chief compliance officer, Dr. Renata Osei, three days later. By then, the arterial lines had been pulled, leaving behind green-and-yellow blooms of bruising on both wrists, and I had been moved from the high-surveillance hum of the ICU to a private room on the fourth floor of the maternal-infant wing.
The room was larger, but it felt no less clinical. A single window looked out over the grey, rain-slicked slate of the lower pavilion roofs, where the Seattle drizzle had settled into a steady, grey mist that blurred the outlines of the parking garage.
Dr. Osei sat carefully in the blue vinyl armchair beside my bed. She was a tall, elegant woman of fifty, with sharp, dark eyes and a neat, grey-streaked bob. She wore a tailored charcoal suit beneath her yellow isolation gown, her ID badge hanging from a heavy silver chain that clicked against her collarbone whenever she leaned forward.
"Dr. Grant," she said, her voice carrying the dry, rhythmic cadence of someone who had spent her career navigating the narrow channel between medical ethics and corporate liability. "I want to be direct with you about what we’ve found, because I believe you deserve complete transparency given everything you’ve endured."
She had a blue cardboard folder resting on her lap—the thick, heavy kind used for peer-review files that would eventually find their way into the legal department’s permanent archives.
"I’ve spent the last forty-eight hours reviewing the clinical entry logs, the internal communications, and the staff statements," she said. "We didn't just look at the events of the delivery room, Amelia. When a senior clinical staff member is injured during an elective procedure managed by her own spouse, we are required by state law to perform a comprehensive retrospective audit."
"And what did the audit show, Renata?" I asked. My hands, still covered in small, white squares of tape from the IV lines, lay flat on the waffle-weave blanket.
"It showed that the delivery room was the end of a long line of decisions," she said, opening the folder. "Not the beginning."
She pulled out a printed spreadsheet and laid it on my bedside table, right next to the plastic cup of water and the untouched tray of dry toast.
"This is the entry log for your personal electronic health record," she said, her finger tracing a column of dates and times. "As you know, our IT system is designed to flag any unauthorized access to staff medical files. Under HIPAA, no doctor is permitted to view a colleague’s chart unless they are directly involved in their care."
I looked at the names.
User: C_Grant_MD was there, as expected. Cameron was my managing physician, a choice we had made together during my first trimester—a choice that had seemed practical, even romantic, at the time. Two doctors, managing their own pregnancy within their own institution.
But beneath his name, repeated dozens of times over a four-month period, was another credential.
User: S_Mendoza_Intern.
"Sophie," I whispered, the name dry and cold in my throat.
"Yes," Dr. Osei said. "Sophie Mendoza accessed your complete obstetric history, your genetic screening results, your previous surgical records for endometriosis, and even your personal history of medication use. She viewed these files from her personal tablet, often late at night or during her rotations in the neonatal ward."
May you like
"Why wasn't she flagged?" I asked. My mother had asked the same question, but I needed to hear the administrative reality from the woman who held the keys to the database.
"Because each entry was authorized by an administrative override code," Dr. Osei said. She turned the page, revealing a series of digital authorization slips. "An override code that was issued to Dr. Cameron Grant."