Healthcare Hack Leads to $2.3 Million OCR Settlement
In April of 2014, CHSPSC’s information system was hacked. The healthcare hack ended up affecting 6.1 million individuals, exposing their protected health information. As a result, CHSPSC [...]
Lawsuit Claims EHR Violated HIPAA Right of Access
A lawsuit filed by Sherry Russell claims that HealthAlliance Hospital and Ciox Health denied access to her deceased husband’s medical records. If her claims are true, the [...]
$1.5 Million OCR Fine Issued for Widespread Noncompliance with HIPAA
Athens Orthopedic Clinic PA has agreed to settle with the Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) for its widespread noncompliance with [...]
OCR Settles Five Privacy Rule Violations
In September of 2020, the Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) announced that it settled HIPAA Privacy Rule right of access violations [...]
When Can You Disclose PHI Without Authorization? Refusal to Disclose COVID Data Results in Nurse Firing
A nurse at Clinton County Health Department claims she was recently fired for refusing to disclose the names and addresses of patients that had tested [...]
Employees Involved in Unauthorized Access to Patient Medical Records of George Floyd
Hennepin County Medical Center (HCMC), the facility that treated George Floyd, fired 13 employees for unauthorized access to patient medical records. More details are discussed [...]
OCR Enforcement Discretion for Business Associate PHI Use
The Department of Health and Human Services’ (HHS) Office for Civil Rights, as part of a broad response to support federal and state health authorities and emergency [...]
Physician Sentenced in Criminal HIPAA Violation
Physician, Rita Luthra, has come under fire for a criminal HIPAA violation. The physician was sentenced to one year probation by the U.S. District Court for [...]
HIPAA and Mask Inquires: Is it a HIPAA Violation?
Since the start of the COVID-19 pandemic, many businesses have struggled to come up with plans on how they can safely reopen. This has been of particular concern in [...]
$1,040,000 OCR Settlement Reached for Stolen Unencrypted Laptop
Lifespan Affiliated Covered Entity (“Lifespan ACE”) is a HIPAA-covered entity. This not-for-profit health system includes three academic teaching hospitals, a medical and mental health services hospital, and Rhode Island’s [...]
