News & Analysis as of

Office of Civil Rights Settlement Corrective Action Plans (CAPs)

Health Care Compliance Association (HCCA)

Seven Years After Worldwide NotPetya Attacks, OCR Singles Out PA System, Collects Nearly $1M

Unleashed on June 27, 2017, NotPetya caused an estimated $10 billion in damages globally, among the costliest ransomware attacks in history. In 2018, the Trump administration—in tandem with the British government—blamed...more

Saul Ewing LLP

HIPAA Security Rule Settlement Results in $950,000 Payment by a Mid-Atlantic Health System

Saul Ewing LLP on

On July 1, 2024, the U.S. Department of Health and Human Services (“HHS”) Office For Civil Rights (“OCR”) announced a $950,000 settlement with Heritage Valley Health System (“Heritage Valley”) and a three-year Corrective...more

Skadden, Arps, Slate, Meagher & Flom LLP

HHS Office for Civil Rights Reaches Second Health Care Ransomware Settlement

The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently announced its second settlement in four months growing out of a ransomware attack on a health care business. Maryland-based Green Ridge...more

Saul Ewing LLP

HHS OCR Issues Its Most Recent HIPAA Annual Report and a Second Ransomware Settlement

Saul Ewing LLP on

On February 14, 2024, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) issued two reports to Congress as required by the Health Information Technology for Economic and Clinical Health...more

Health Care Compliance Association (HCCA)

In This Month’s E-News: March 2024

The Association of American Universities (AAU) and the Council on Governmental Relations (COGR) are among a handful of groups “urging the Biden administration to rescind a policy proposal that would threaten the American...more

Health Care Compliance Association (HCCA)

OCR Ends Year With Settlements That Tread Old Ground, Says New Rules Are Coming—Someday

If the penultimate enforcement settlement of 2023 issued by the HHS Office for Civil Rights (OCR) sounds familiar, that’s with good reason. And the last one of the year should ring some bells, too....more

Dorsey & Whitney LLP

HIPAA on the Horizon in the New Year: Important Lessons from an Active 2023 and Regulatory Initiatives to Watch for in 2024

Dorsey & Whitney LLP on

2023 marked 20 years since the first compliance deadline under the Health Insurance Portability and Accountability Act’s (“HIPAA”) privacy rule. Despite the two decades of experience with HIPAA, compliance continues to remain...more

Saul Ewing LLP

News Article Results in $80,000 HIPAA Settlement by New York State Hospital

Saul Ewing LLP on

On November 20, 2023, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced an $80,000 HIPAA settlement with Saint Joseph’s Medical Center (“SJMC”) in New York State. The...more

Health Care Compliance Association (HCCA)

Dramatic Portrayal of Care During Early COVID-19 Costs Hospital $80K; OCR: No Prior Authorization

Report on Patient Privacy 23, no. 12 (December, 2023) Spring 2020 was a terrifying period in the annals of COVID-19, and New York was at the epicenter. COVID-19 cases, and deaths, already the highest in the nation, were...more

King & Spalding

OCR Settles with LA Care Health Plan Over Potential HIPAA Security Rule Violations

King & Spalding on

On September 11, 2023, the HHS Office of Civil Rights (OCR) announced a settlement with LA Care Health Plan (LA Care) regarding LA Care’s potential HIPAA Security Rule violations. HHS and LA Care have executed a Resolution...more

Saul Ewing LLP

California Health Plan Pays $1,300,000 to Settle Alleged HIPAA Violations

Saul Ewing LLP on

On September 11, 2023, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced a settlement with LA Care related to potential violations of Health Insurance Portability and...more

Ankura

OCR Settlement of HIPAA Violation of Business Associate

Ankura on

On May 16, 2023, the U.S. Department of Health and Human Services (DHHS) through the Office for Civil Rights (OCR) announced a settlement of potential violations of the Health Insurance Portability and Accountability Act...more

WilmerHale

HHS OCR Settles with iHealth Solutions Over Alleged HIPAA Violations

WilmerHale on

On June 28, the US Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced a settlement (resolution agreement and corrective action plan) with iHealth Solutions (also known as Advantum Health)...more

Mintz - Health Care Viewpoints

OCR HIPAA Privacy Rule Enforcement Roundup: Right of Access Initiative and Improper PHI Disposal

The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) has been busy over the past month announcing new enforcement actions and settlement agreements related to violations of the Privacy...more

BakerHostetler

What’s Old Is New Again: OCR Announces $300,000 Settlement Related to Improper Disposal of Physical PHI

BakerHostetler on

​​​​​​​After a long stretch of breach enforcement actions and settlements arising out of alleged technology gaps, the U.S. Department of Health & Human Services Office for Civil Rights (OCR) announced that it settled a case...more

BakerHostetler

OCR Announces Four Enforcement Actions

BakerHostetler on

On March 28, 2022, Health and Human Services, Office for Civil Rights (OCR) announced the resolution of four enforcement actions, three resolved in 2021 and one resolved in 2022. There are some interesting aspects of this...more

Arnall Golden Gregory LLP

OCR Reaches Its Twentieth Settlement Under the Two-Year-Old Right of Access Initiative

The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) recently announced the 20th Resolution Agreement in its Health Insurance Portability and Accountability Act (HIPAA) Right of Access...more

Arnall Golden Gregory LLP

Continuation of OCR’s Right of Access Initiative with a Nineteenth Settlement

On June 2, 2021, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) announced the 19th Resolution Agreement in the Health Insurance Portability and Accountability Act (HIPAA) Right of...more

Saul Ewing LLP

OCR Settles Nineteenth Investigation in HIPAA Right Of Access Initiative

Saul Ewing LLP on

On June 2, 2021, the Office for Civil Rights (OCR) within the U.S. Department of Health and Human Services (HHS), announced that the Diabetes, Endocrinology & Lipidology Center, Inc., (DELC) agreed to pay $5,000, enter into a...more

Saul Ewing LLP

Two More OCR HIPAA Right of Access Initiative Settlements Announced With a Massachusetts Behavioral Health Hospital and a New...

Saul Ewing LLP on

On March 24th and March 26th, the United States Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”) announced it settled its respective seventeenth and eighteenth enforcement actions as part of...more

Jackson Lewis P.C.

Small NJ Medical Practice Becomes 18th Target Of OCR’s HIPAA Right Of Access Enforcement Initiative

Jackson Lewis P.C. on

A small New Jersey plastic surgery practice, Village Plastic Surgery (“VPS”), has become the eighteenth HIPAA covered entity to face an enforcement action under the Office for Civil Right’s HIPAA Right of Access Initiative....more

Saul Ewing LLP

Sweet 16? Regional Health Care Organization Agrees to Pay $70,000 as Part of OCR’s Most Recent Settlement Relating to Its Right of...

Saul Ewing LLP on

On February 12th, the United States Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”) announced it settled its sixteenth enforcement action as part of its HIPAA Right of Access Initiative (the...more

Saul Ewing LLP

OCR’s Fifteenth HIPAA Right of Access Initiative Settlement Results in Not-for-Profit Health System Paying $75,000

Saul Ewing LLP on

In the first settlement under the Biden Administration, on February 10th the Office for Civil Rights (“OCR”) at the U.S. Department of Health and Human Services (“HHS”) announced a settlement of a fifteenth enforcement action...more

Saul Ewing LLP

Health Insurer Agrees to Pay $5+ Million Settlement Resulting From a Data Breach Affecting More Than Nine Million Individuals and...

Saul Ewing LLP on

In one of the final health care-related actions by the Trump Administration, on January 15, 2021, the United States Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced that Excellus Health...more

Foley & Lardner LLP

HIPAA Right of Access Initiative: 2020 Year in Review

Foley & Lardner LLP on

In 2020, the Office for Civil Rights (OCR) kept the promise it made the prior year to “vigorously enforce” the rights of patients to access and exercise control over their medical records. OCR has settled ten “right of...more

35 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide