OCR Settles New England Dermatology HIPAA Violations for $300,640

Springfield, Massachusetts, is home to the Naismith Memorial Basketball Hall of Fame  - a mere 90-minute ride to Boston. Springfield is also, less famously, the headquarters of New England Dermatology, P.C., d/b/a New England Dermatology and Laser Center (“NEDLC”). This HIPAA covered entity provides treatment for skin, hair, and nail diseases, including acne, eczema, psoriasis, and rashes. In late August of 2022, [...]

2022-08-24T10:15:41-04:00August 24th, 2022|

OCR HIPAA Investigation Leads to 20th Right of Access Fine

On September 10, 2021, the Department of Health and Human Services Office for Civil Rights (OCR) announced the issuance of another right of access fine. The OCR HIPAA investigation led to the twentieth right of access fine issued since the 2019 right of access enforcement initiative was announced. Children's Hospital & Medical Center OCR HIPAA Investigation In May 2020, the OCR received [...]

2022-05-06T14:43:58-04:00September 10th, 2021|

OSHA COVID-19 Enforcement is Now Prioritized

The United States Department of Labor (DOL), the federal agency that enforces OSHA law, has issued new OSHA enforcement guidance. The guidance is intended to be time-limited to the current COVID-19 public health crisis. Under the new guidance, OSHA has prioritized elimination and control of workplace exposure to SARS-Co-V-2, the cause of COVID-19. More about OSHA COVID-19 enforcement is discussed below. Updated OSHA COVID-19 Enforcement Strategy [...]

2022-07-22T13:49:11-04:00April 23rd, 2021|

OCR Fines Village Plastic Surgery for Stretching HIPAA Right of Access Rule

In late March of 2021, the Department of Health and Services (HHS) Office for Civil Rights (OCR) settled with New Jersey-based Village Plastic Surgery (VPS) for a potential violation of the HIPAA right of access rule. The $30,000 settlement requires VPS to undergo a two-year corrective plan (CAP). The details of the settlement are discussed below. Village Plastic Surgery HIPAA Right of Access Rule Violation [...]

2022-05-06T14:44:03-04:00March 26th, 2021|

$65,000 Right of Access Violation Settlement

The Department of Health and Human Services’ (HHS) Office for Civil Rights recently announced its seventeenth settlement of an enforcement action under its HIPAA Right of Access Initiative. The Arbour, Inc., doing business as Arbour Hospital (Arbour), has agreed to pay $65,000 to settle a potential right of access standard violation. Arbor has also agreed to submit to a one-year corrective action plan (CAP). More details on the [...]

2022-05-06T14:44:03-04:00March 24th, 2021|

Sharp HealthCare Pays $70,000 to Settle Potential Right of Access Violation

In February of 2021, Sharp HealthCare, doing business as Sharp-Rees Stealy Medical Centers (SRMC), paid $70,000 to the Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) to settle a potential violation of the HIPAA Privacy Rule right of access standard. The Sharp settlement has become OCR’s sixteenth settlement under OCR’s right of access initiative. Under this initiative that began in 2019, OCR continues to [...]

2022-05-06T14:44:07-04:00February 12th, 2021|

Renown Health Fined $75,000 Under HIPAA Right of Access Initiative

Not-for-profit Nevada health system Renown Health, P.C., has agreed to pay $75,000 to the Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) to settle a potential violation of the HIPAA Privacy Rule right of access provision. The settlement is a product of HHS’ Right of Access Initiative. Under this initiative, OCR established cracking down on providers who fail to grant timely patient access to [...]

2022-05-06T14:44:07-04:00February 10th, 2021|

OCR Enforcement Discretion and COVID Vaccination

Since the release of the COVID-19 vaccine, healthcare organizations have scrambled to provide patients with timely vaccination. With the difficulties in scheduling vaccines, some providers have turned to non-traditional appointment scheduling platforms, such as Eventbrite. In an effort to ease vaccine initiatives, the Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) announced that, as of December 11, 2020, it will exercise enforcement discretion for [...]

2021-01-21T11:58:04-05:00January 21st, 2021|

2020 Violations of the HIPAA Privacy and Security Rules

In 2020, the Department of Health and Human Services’ (HHS) Office for Civil Rights issued a record 19 fines for failure to comply with the HIPAA regulations. Two of the fines issued were hybrids - based on violations of the HIPAA Privacy and Security Rules in equal measure. These HIPAA fines are discussed below. Aetna and Violations of the HIPAA Privacy and Security Rules [...]

2022-05-06T14:44:10-04:00January 20th, 2021|

OCR 2020 and HIPAA Security Rule Violations

In 2020, the Department of Health and Human Services’ (HHS) Office for Civil Rights issued a record 19 fines for failure to comply with the HIPAA regulations. Six of the fines announced in 2020 were principally issued for failure to comply with the HIPAA Security Rule’s requirement to conduct a security risk assessment and to track and inventory network devices. The message of OCR 2020: Keep patient records [...]

2022-05-06T14:44:10-04:00January 19th, 2021|