News & Analysis as of

Enforcement Actions Health Care Providers Fines

Skadden, Arps, Slate, Meagher & Flom LLP

UK GDPR Regulator Fines Data Processor After Ransomware Attack

On 27 March 2025, the UK Information Commissioner’s Office (ICO) issued a £3.07 million fine to an IT services provider following a ransomware attack in 2022 that affected the company’s health care business. The ransomware...more

Baker Donelson

CMS Revises Immediate Jeopardy Guidance: Key Updates for Providers

Baker Donelson on

The federal Centers for Medicare and Medicaid Services (CMS) issued QSO-25-09-ALL on November 21, 2024, revising Core Appendix Q guidance to the State Operations Manual on Immediate Jeopardy. Immediate Jeopardy (IJ) is the...more

Health Care Compliance Association (HCCA)

Recognized Security Practices ‘Saved’ Covered Entity $60K of $300K Fine, But Which Ones Remain a Mystery

Covered entities (CEs) and business associates (BAs) may receive a “discount” for having recognized security practices (RSPs) in place when the HHS Office for Civil Rights (OCR) calculates financial penalties for Security...more

Saul Ewing LLP

No “Trick”: Plastic Surgery Practice Agrees to Pay a $500,000 HIPAA Settlement Following Ransomware Attack

Saul Ewing LLP on

On October 31, 2024, the U.S. Department of Health and Human Services (“HHS”), Office of Civil Rights (“OCR”) announced a $500,000 settlement with Plastic Surgery Associates of South Dakota (“PSA”) concerning potential...more

Nossaman LLP

DMHC and DHCS Fine L.A. Care $55 Million in Enforcement Actions

Nossaman LLP on

The California Department of Managed Health Care (DMHC) on March 4, 2022, assessed the largest penalty against a health plan in the Department’s history. DMHC and the California Department of Health Care Services (DHCS)...more

Bricker Graydon LLP

EHR vendor Practice Fusion agrees to $145 million settlement to resolve criminal and civil kickback violations

Bricker Graydon LLP on

On January 27, 2020, the Department of Justice (DOJ) announced a $145 million settlement with electronic health record (EHR) vendor Practice Fusion to resolve civil and criminal allegations that it violated the Anti-Kickback...more

Robinson+Cole Health Law Diagnosis

DOJ Announces Settlement with EHR Company to Resolve Criminal and Civil Kickback Investigations Tied to Opioid Prescribing

On January 27, 2020, the Department of Justice (DOJ) announced a $145 million settlement with Practice Fusion Inc., an electronic health records (EHR) software company, that resolves parallel criminal and civil investigations...more

Robinson+Cole Health Law Diagnosis

Texas Health and Human Services Fined $1.6 Million for HIPAA Violations

The Office for Civil Rights (OCR) announced that it has fined the Texas Health and Human Services Commission (TXHHS) $1.6 million for HIPAA violations. This is one of the few fines the OCR has levied against a state agency....more

Robinson+Cole Data Privacy + Security Insider

Dental Practice Pays $10,000 Fine to OCR for Disclosing PHI on Social Media

Elite Dental Associates (Elite), located in Dallas, Texas has agreed to settle alleged HIPAA violations with the Office for Civil Rights (OCR) for $10,000....more

9 Results
 / 
View per page
Page: of 1

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide