EHR Vendors at Risk of 2017 HIPAA Enforcement Actions
The threat of a HIPAA investigation is only one of the exposures that EHR vendors face when it comes to the implementation of privacy and security standards. One of [...]
Multi-Million Dollar HIPAA Fines Underscore Widespread Security Violations
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has issued two HIPAA fines totaling $5.4 million. In both cases, OCR investigations revealed widespread violations [...]
First Settlement for Violating the HIPAA Breach Notification Rule
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced its first settlement for violating the HIPAA Breach Notification Rule with Presence Health for $475,000. [...]
Over Half a Million Affected by Data Breach at Georgia-based Orthopedic Firm
The Atlanta, Georgia-based Peachtree Orthopedics reported that the records of over half a million patients were compromised in a cyberattack in September of 2016. The firm first notified patients [...]
2017 HIPAA Compliance Checklist
In 2016 alone, the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) levied over $25 million in fines. Enforcement has more than doubled since 2015's [...]
Malware Costs UMass $650k in HIPAA Violations
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced a $650,000 settlement with the University of Massachusetts Amherst (UMass) in the wake of potential HIPAA [...]
Pharmacy Reps Sentenced for Criminal HIPAA Violations
U.S. District Court judges sentenced three former district managers of a pharmaceutical firm to a series of criminal HIPAA violations that have been linked to healthcare [...]
Almost 900,000 Affected in Anesthesia Group PHI Breach
Phoenix, Arizona based Valley Anesthesiology and Pain Consultants (VAPC) has notified 882,590 patients of a potential breach of protected health information (PHI) that occurred on March [...]
The 5 Most Landmark OCR Settlements in 20 Years of HIPAA
When HIPAA was first enacted in 1996, few people could have anticipated the shock waves that this landmark regulation would send across the healthcare industry. The [...]
Six Risk Assessments Fail to Prevent $2.7 Million HIPAA Settlement
Oregon Health and Science University (OHSU) reached a settlement with OCR earlier in July for $2.7 million. The organization had executed six risk analysis over the course of 10 [...]
