News & Analysis as of

Civil Monetary Penalty Enforcement Actions Health Insurance Portability and Accountability Act (HIPAA)

Saul Ewing LLP

OCR Imposes $115,200 CMP Against HIPAA-Covered Entity

Saul Ewing LLP on

On August 1, 2024, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced a civil monetary penalty of $115,200 against American Medical Response (“AMR”) based on a complaint that...more

Arnall Golden Gregory LLP

OCR Announces Latest in Right of Access Enforcement Actions With Imposition of Civil Monetary Penalty

On August 1, 2024, the U.S. Department of Health and Human Services, Office for Civil Rights (“OCR”) announced the imposition of a civil monetary penalty (“CMP”) of $115,200 collected against American Medical Response...more

Clark Hill PLC

GoodRx Pays $1.5 Million Settlement in the FTC’s First Enforcement Action Under the Health Breach Notification Rule

Clark Hill PLC on

For the first time since it became law on Aug. 25, 2009, the Federal Trade Commission (“FTC”) has taken enforcement action under 16 C.F.R. § 318, also known as the Health Breach Notification Rule, with a $1.5 million civil...more

Perkins Coie

FTC Claims Sharing User Health Data With Advertising Platforms Is a “Security Breach”

Perkins Coie on

For the first time, the Federal Trade Commission has brought an enforcement action under its 2009 Health Breach Notification Rule (HBNR). The case was brought against a digital health company, GoodRx Holdings, Inc., for...more

Foley & Lardner LLP

Public Health Emergency Ends May 11: What Telehealth Companies Need to Know

Foley & Lardner LLP on

On January 30, 2023, the Biden Administration announced its intent to end the COVID-19 public health emergency (PHE) on May 11, 2023. The PHE has been in place for over three years during which time many telehealth and...more

Health Care Compliance Association (HCCA)

Report on Patient Privacy Volume 22, Number 11. MD Anderson Won Against OCR, But Agency’s Response—Including on Fines—Keeps...

Report on Patient Privacy Volume 22, Number 11. (November 2022) Nearly five years passed from the time the University of Texas MD Anderson Cancer Center reported to the HHS Office for Civil Rights (OCR) that three...more

Steptoe & Johnson PLLC

OCR Enforcement of Right to Access Extends to Dental Practices

Steptoe & Johnson PLLC on

The U.S. Department of Health and Human Services Office for Civil Rights (OCR) continues its enforcement activities to emphasize compliance with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule’s...more

Cozen O'Connor

HIPAA “Right of Access” Enforcement Trend Continues

Cozen O'Connor on

The Office of Civil Rights of the Department of Health and Human Services (“OCR”) announced the resolution of three more right of access cases, bringing the total to a whopping 41 since the start of its drive to increase...more

Clark Hill PLC

With Recent Settlements, HHS OCR’s HIPAA Right of Access Initiative Continues To Be a Focus of Enforcement

Clark Hill PLC on

OCR’s HIPAA Right of Access Initiative shows no signs of slowing down. On July 15, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced the resolution of 11 more cases at a total of...more

Robinson+Cole Data Privacy + Security Insider

OCR Settles Improper Disposal Case for $300,640

On August 23, 2022, the Office for Civil Rights (OCR) issued a press release announcing that it had settled with New England Dermatology, P.C. (NED) for $300,640 “over the improper disposal of protected health information.” ...more

Saul Ewing LLP

11 Additional Providers Resolve HHS OCR Investigations Related to the HIPAA Right of Access Initiative

Saul Ewing LLP on

On July 15, 2022, the Office for Civil Rights (OCR) within the U.S. Department of Health and Human Services (HHS) announced the resolution of eleven investigations as part of its Health Insurance Portability and...more

ArentFox Schiff

Disclosing Patient Information in Responses to Online Reviews: Recent OCR Enforcement Action Is a Cautionary Tale

ArentFox Schiff on

The HHS Office for Civil Rights (OCR) recently imposed a $50,000 civil monetary penalty on a dental practice that disclosed patient-identifying information in response to a negative online review. The case is a reminder that...more

Health Care Compliance Association (HCCA)

OCR: Current Fines Too Low to Spur Compliance; Agency Also Seeks Funding Boost, Injunctive Relief

Report on Patient Privacy 22, no. 5 (May, 2022) - Compared to other agencies, the HHS Office for Civil Rights (OCR) is a little fish in the big federal pond, but it has an outsize effect on HIPAA covered entities (CEs) and...more

Saul Ewing LLP

HHS Announces Four HIPAA Compliance Enforcement Actions With Health Care Providers

Saul Ewing LLP on

On March 28, 2022, the United States Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”) announced the resolution of three investigations and one matter before an Administrative Law Judge related...more

Rivkin Radler LLP

OCR Announces Four HIPAA Enforcement Actions

Rivkin Radler LLP on

On March 28, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced four new enforcement actions against healthcare providers for HIPAA violations....more

Jackson Lewis P.C.

“Get a Life” – Another Dentist Responds to Patient’s Online Review, This Time Faces a $50,000 OCR Penalty

Jackson Lewis P.C. on

It can be cathartic responding to a negative online review. It can also backfire, as can failing to cooperate with an OCR investigation as required under HIPAA. The Office for Civil Rights (OCR) recently announced four...more

Saul Ewing LLP

OCR Announces Five Enforcement Actions With Five Different Providers Pursuant to the HIPAA Right of Access Initiative

Saul Ewing LLP on

On November 30, 2021, the United States Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced its five actions – four settlements and corrective action plans, and one civil money penalty in...more

Sheppard Mullin Richter & Hampton LLP

What Does the Fifth Circuit’s Vacating of HHS HIPAA Fines Mean for Companies This Year?

Will HHS’ approach for imposing penalties in the aftermath of a data breach become a little clearer in 2021? This is a distinct possibility in the wake of a Fifth Circuit decision vacating penalties against MD Anderson Cancer...more

Holland & Knight LLP

Healthcare Law Update: February 2021

Holland & Knight LLP on

To date, there has been little consistency in how Health Insurance Portability and Accountability Act (HIPAA) requirements are enforced by the U.S. Department of Health and Human Services (HHS), or the amount of settlements...more

Morgan Lewis

Fifth Circuit Vacates Civil Money Penalty, Finds MD Anderson in Compliance with HIPAA

Morgan Lewis on

The US Court of Appeals for the Fifth Circuit issued its ruling in the landmark HIPAA case between The University of Texas MD Anderson Cancer Center (MD Anderson) and the US Department of Health and Human Services (HHS). The...more

Dorsey & Whitney LLP

2020’s a Bust, but HIPAA Enforcement Is on a Roll!

Dorsey & Whitney LLP on

The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) has been actively enforcing HIPAA regulations this year, including a series of seven settlements under OCR’s Right of Access...more

Tucker Arensberg, P.C.

Ambulance Company Pays $65,000 Settlement

Tucker Arensberg, P.C. on

On December 30, 2019, the U.S. Department of Health and Human Services, Office for Civil Rights (“HHS”) announced a $65,000 settlement with West Georgia Ambulance, Inc. for  violations of the Health Insurance Portability and...more

Mintz - Privacy & Cybersecurity Viewpoints

A New Decade of HIPAA – What Can We Expect?

As the decade winds down, it’s hard to believe that the HIPAA Privacy and Security Rules are almost twenty years old. It has been ten years since the U.S. Department of Health and Human Services (HHS) Office for Civil Rights...more

Tucker Arensberg, P.C.

$3,000,000 Settlement by University of Rochester Medical Center for Numerous HIPAA Violations

Tucker Arensberg, P.C. on

On November 5, 2019, the U.S. Department of Health and Human Services, Office for Civil Rights (“HHS”) announced a $3,000,000 settlement with the University of Rochester Medical Center (“URMC”) for violations of the Health...more

King & Spalding

OCR Imposes $2.15 Million Penalty Against Hospital System for Alleged HIPAA Violations

King & Spalding on

On October 23, 2019, the Office for Civil Rights (OCR) at HHS announced the imposition of a $2,154,000 civil monetary penalty against a Florida hospital system (Hospital System) for alleged violations of the HIPAA Security...more

47 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide