We suspected that a customer was the victim of elder financial exploitation and filed a report with the Illinois Department on Aging. They referred us to the Illinois Long Term Care Ombudsman, since the customer is a nursing home resident. The Ombudsman now wants us to report the issue to the Illinois State Police. Are we risking any liability by reporting, since we don’t have any proof that fraud occurred?

Yes, we believe that your institution could risk some liability when reporting suspected elder financial abuse concerning a nursing home resident. If your bank does believe that a report of suspected abuse would help the resident, we would recommend that you request the Ombudsman to report the issue to the Illinois State Police.

Since your institution is not mandated to report suspected elder financial exploitation (see 320 ILCS 20/2(f-5)), the risks of not reporting in response to the Ombudsman’s request are relatively low. On the other hand, the risks of reporting in response to the Ombudsman’s request are relatively higher. As discussed below, although when reporting you likely would qualify for an exception under the Illinois and federal financial privacy laws, the voluntary reporting on suspected financial exploitation of a nursing home resident is not eligible for a safe harbor from criminal or civil liability that could arise under other laws.

Exceptions under financial privacy laws. Both Illinois and federal financial privacy laws include exceptions that would permit you to reveal a customer’s private information when reporting elder financial abuse. The Illinois Banking Act explicitly permits banks to furnish information to the Department on Aging and to law enforcement authorities, among other appropriate agencies, “if there is suspicion by the bank that a customer who is an elderly or disabled person has been or may become the victim of financial exploitation.” 205 ILCS 5/48.1(b)(16). An exception under federal law applies whenever a bank needs “to protect against or prevent actual or potential fraud, unauthorized transactions, claims, or other liability.” 15 USC 6802(e)(3)(B).

No safe harbor from other criminal or civil liability. The Adult Protective Services Act provides immunity for persons reporting suspected financial abuse of an “eligible adult,” and this safe harbor applies to “criminal or civil liability or professional disciplinary action on account of making the report . . . .” 320 ILCS 20/4(a-7). However, the safe harbor does not apply if the alleged victim is not an “eligible adult,” and that term excludes individuals living in many types of nursing home facilities (listed below). If the customer lives in one of the following types of facilities, your institution would NOT qualify for a safe harbor from potential criminal or civil liability for making a report: