Latest Posts › PHI

Share:

“Insecure” Diagnostic Imaging Company Server Leads to $3 Million HIPAA Settlement

On May 6, 2019, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced that Touchstone Medical Imaging (TMI) agreed to pay $3,000,000 to settle alleged HIPAA violations arising out of...more

HHS Lowering Cumulative Annual Civil Money Penalties It Will Apply Under HIPAA and HITECH Acts

On April 26, 2019, the U.S. Department of Health and Human Services (“HHS”) published an Enforcement Discretion letter announcing it is meaningfully lowering the cumulative annual civil money penalties (“CMPs”) it will apply...more

Research Study Highlights How Hospitals May Be Vulnerable to Cybersecurity Threats That Impact Diagnostic Tools

Health care providers are heavily reliant on technology in providing clinical services. The findings from a recent research study highlight the significant threat of cyber risks in health care that is in addition to the...more

OCR Announces Third HIPAA Settlement in Three Weeks; Issues an RFI on Reducing HIPAA Barriers to Care

There were two important HIPAA developments during this past week. First, the U.S. Department of Health and Human Services, Office for Civil Rights (“OCR”) announced that Pagosa Spring Medical Center (“PSMC”), a Colorado...more

Missing BAA Results in $500,000 HIPAA Settlement

On December 4, 2018, the U.S. Department of Health and Human Services, Office for Civil Rights (OCR) announced that Advanced Care Hospitalists (ACH) agreed to pay $500,000 to settle alleged HIPAA violations arising out of ACH...more

“Expensive News”: Medical Practice Enters Into $125,000 HIPAA Settlement For Sharing PHI With a Reporter

On November 26, 2018, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced that Allergy Associates of Hartford, P.C. (AAH) agreed to pay $125,000 to settle alleged HIPAA violations...more

ALJ Requires MD Anderson Cancer Center to Pay $4.3M for HIPAA Violations

The U.S. Department of Health and Human Services ("HHS"), Office for Civil Rights ("OCR") announced earlier this month that an HHS administrative law judge ("ALJ") ruled in favor of the OCR on summary judgment and required MD...more

2018 Health Law Predictions

2017 was a year in contrasts for the health care delivery system. Congress and President Trump made several attempts to “repeal and replace” the Affordable Care Act. Controversy about marijuana continued as more states...more

A Super-Bowl Sized HIPAA Settlement Results in $3.5 Million Payment

On February 1, 2018, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced that Fresenius Medical Care North America (FMCNA) agreed to pay $3.5 million and enter into a Corrective...more

2017 Closes with $2 Million HIPAA Settlement

On December 28, 2017, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced that 21st Century Oncology, Inc. (21CO) agreed to pay $2.3 Million in lieu of potential civil money...more

Impermissible Disclosure of HIV Information Results in $387,000 HIPAA Settlement

St. Luke’s-Roosevelt Hospital Center, Inc. (SLRHC), a member of the New York-based Mount Sinai Health System, paid $387,000 to the U.S. Department of Health and Human Services (HHS) and entered into a corrective action plan...more

Inappropriate Disclosure of a Single Patient Name Results in $2.4 Million HIPAA Settlement

Texas’ Memorial Hermann Health System (MHHS) paid $2.4 million to the U.S. Department of Health and Human Services (HHS) and entered into a corrective action plan (CAP) to resolve allegations related to the impermissible...more

First HIPAA Settlement Involving a Wireless Health Services Provider

On April 24, 2017, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced that CardioNet, Inc. (CNI) agreed to pay $2.5 million and enter into a Corrective Action Plan (CAP) to settle...more

Failure to Implement Business Associate Agreement Results in $31,000 Settlement For Health Care Provider

On April 20, 2017, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced that Children’s Digestive Health (CDH) agreed to pay HHS $31,000 for its failure to have a business associate...more

Phishing Incident Leads to $400,000 HIPAA Settlement

On April 12, 2017, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced that Metro Community Provider Network (MCPN) agreed to pay HHS $400,000 to settle alleged HIPAA Security Rule...more

$5.5 Million HIPAA Settlement Matches Largest Payment To-Date

On February 16, 2017, the U.S. Department for Health and Human Services (“HHS”), Office for Civil Rights (“OCR”) announced that Memorial Healthcare Systems of Florida (“MHS”) agreed to pay $5.5 million and enter into a...more

Hospital pays $3.2M Resulting from HIPAA Security Rule Noncompliance

In one of the last health care related acts of President Obama’s administration, the U.S. Department of Health and Human Services, Office for Civil Rights (OCR), imposed a multimillion-dollar HIPAA civil money penalty (CMP)...more

HIPAA Settlement Emphasizes Importance of Accurate Hybrid Entity Designations

On November 22, 2016, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR), announced that University of Massachusetts Amherst (UMA) agreed to settle allegations relating to the HIPAA Privacy...more

Health Care System’s HIPAA Security Risk Results in $2.14 Million Fine

On October 18, 2016, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR), announced that St. Joseph Health (SJH) agreed to settle allegations relating to the HIPAA Privacy and Security Rules,...more

OCR Issues Guidance on HIPAA and Cloud Computing

On October 7, 2016, the U.S. Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”), released a guidance document (the “Guidance”) on the HIPAA-compliant use of cloud computing technologies. The...more

Outdated Business Associate Agreement Leads to Another Six-Figure HIPAA Settlement

On September 23, 2016, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced that Care New England Health System (CNEHS) agreed to pay $400,000 and enter into a corrective action plan...more

Largest HIPAA Settlement Announced Against A Single Entity: $5.55 Million

On August, 4, 2016, the U.S. Department of Health and Human Services, Office for Civil Rights (OCR) announced that Advocate Health Care Network (Advocate) agreed to pay a settlement amount of $5.55 million and adopt a...more

Two Multi-Million Dollar HIPAA Settlements Emphasize Importance of a Comprehensive Security Program

The U.S. Department of Health and Human Services, Office for Civil Rights (“OCR”) announced two settlements of more than $2 million each with respect to alleged violations of the Health Insurance Portability and...more

OCR Releases Guidance on Ransomware & HIPAA

On July 11, 2016, the U.S. Department of Health and Human Services, Office for Civil Rights (“OCR”) issued guidance (the “Guidance”) for health care entities relating to ransomware and the Health Insurance Portability and...more

Business Associate Enters Into Mid Six-Figure HIPAA Settlement

On June 30, 2016, the U.S. Department of Health and Human Services, Office for Civil Rights (“OCR”) announced that a business associate providing management services to nursing homes in the Philadelphia, Pa. region agreed to...more

64 Results
 / 
View per page
Page: of 3

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide