When Culture Silences Concerns: Lessons from the Columbia University/ New York-Presbyterian Hospital Report

On Tuesday, March 10, 2026, the New York Times reported a story that describes the findings of an external investigation into how Columbia University and NewYork-Presbyterian Hospital mishandled allegations against former gynecologist Robert Hadden, who sexually assaulted hundreds of patients while employed at both institutions.

According to the report, several complaints about Hadden’s conduct reached physician leaders over time. But those concerns were handled informally and in isolation rather than through a structured process designed to identify patterns of misconduct. Investigators found that decision-makers often deferred to Hadden’s reputation and professional standing. Staff members reportedly felt discouraged or intimidated from escalating concerns about Hadden.

One particularly consequential decision occurred in 2012 after Hadden was detained by police following an allegation of sexual assault. Leadership allowed him to continue seeing patients for several weeks with a chaperone present before he ultimately went on leave. Several women later reported that they were abused during that period.

The problem was not simply a lack of information, but rather an institutional environment in which concerns were not systematically documented, investigated, or escalated. The result was that warning signs that might have revealed a pattern of misconduct never triggered meaningful intervention. This dynamic reflects a broader compliance risk that organizations in highly regulated industries—especially healthcare—must confront: when employees do not feel safe raising concerns, serious problems can remain hidden until the consequences become impossible to ignore.

What “Speak-Up Culture” Means in Healthcare Compliance

In healthcare compliance, a “speak-up culture” refers to an organizational environment in which employees feel empowered—and expected—to raise concerns about potential misconduct, safety issues, or regulatory violations. Importantly, a speak-up culture is not created simply by adopting a reporting hotline or compliance policy. Most healthcare organizations already have those tools. The real question is whether employees believe those systems actually work.

A functioning speak-up culture generally includes several elements:

• First, employees must have multiple channels for reporting concerns, including supervisors, compliance personnel, and confidential reporting mechanisms. This is consistent with the expectations reflected in federal healthcare compliance guidance issued by the Department of Justice and the Office of Inspector General.

  
  

• Second, employees must believe they can report concerns without fear of retaliation. In hierarchical environments such as hospitals and academic medical centers, this issue is particularly important. Nurses, residents, technicians, and administrative staff often observe problematic behavior before leadership does. If those individuals believe that reporting concerns will harm their careers or reputations, the reporting system effectively breaks down.

  
  

• Third, concerns must be documented, investigated, and tracked. One of the most significant failures identified in the Columbia investigation was the lack of systems that would allow leadership to identify patterns across complaints. Without proper documentation and centralized review, organizations risk treating serious issues as isolated incidents rather than potential systemic problems.

  
  

Ultimately, a speak-up culture functions as an organization’s early warning system. When it works, organizations learn about risks internally and have the opportunity to investigate and address them before patients are harmed or regulators become involved.

3. Key Takeaways for Building a Strong Speak-Up Culture

Organizations seeking to strengthen their compliance programs should view speak-up culture as an operational priority rather than a messaging exercise. Several practical steps can make a meaningful difference.

1. Make reporting expectations explicit.Employees should understand that raising concerns is part of their professional responsibility. Compliance training should emphasize that reporting potential misconduct protects patients, colleagues, and the organization itself.

2. Provide multiple reporting pathways.Employees should be able to report concerns through supervisors, compliance officers, HR personnel, or confidential reporting mechanisms. No single channel works for every employee or situation.

3. Investigate concerns promptly and independently.Every credible report should trigger a documented review process. Investigations should be conducted by individuals with appropriate independence and authority, and findings should be memorialized in a way that allows the organization to identify patterns across complaints.

4. Take corrective action when misconduct is substantiated.A reporting system loses credibility if investigations do not lead to meaningful consequences. Depending on the circumstances, corrective action may include policy changes, additional training, monitoring, suspension of privileges, or disciplinary measures.

5. Demonstrate accountability from leadership.Employees pay close attention to how organizations handle complaints involving influential or high-performing individuals. When leadership applies compliance standards consistently—regardless of status—it reinforces the message that reporting concerns is both safe and worthwhile.

The Columbia / New York-Presbyterian Hospital investigation illustrates how organizational culture can shape whether warning signs are surfaced or suppressed. Healthcare organizations operate in complex and highly regulated environments. Ensuring that employees feel empowered to raise concerns—and that those concerns are taken seriously—is one of the most effective ways to identify risks early and prevent harm before it occurs.