After two investigations by the United States Department of Health and Human Services, Office for Civil Rights (“HHS”), St. Elizabeth’s Medical Center, a Boston-based hospital, has agreed to a Resolution Agreement with HHS. The Resolution Agreement appears to settle two apparently unrelated HIPAA issues at the same facility in 2012 and 2014.
The largest data security breaches ever reported have occurred in the last several years. The organizations whose data security systems were compromised in connection with these massive breaches include Anthem, Ebay, Target, Home Depot, JP Morgan Chase, Adobe and now the federal government’s Office of Personnel Management. Not only is the scope of these breaches […]
The Albany County Bar Association Newsletter includes an article written by our colleague, David Nardolillo, on a recent HIPAA-related decision from the Connecticut Supreme Court.
Over the past year, the Office of Civil Rights (“OCR”) has taken a more aggressive stance in enforcing the provisions of the Health Insurance Portability and Accountability Act (HIPAA). The largest settlement for a data breach to date was just announced earlier this year between OCR and New York Presbyterian Hospital and Columbia University. However, […]
The House of Representatives has grown increasingly skeptical of the Office of the National Coordinator for Health Information (“ONC”) and its plans to expand its programming and reach. House members have questioned whether the ONC has the authority to make changes it has recently proposed. In a June 3, 2014, letter to the Office of […]
Illinois courts have now dismissed two class action law suits against Advocate Health and Hospitals Corporation (“Advocate”), stemming from a July 2013 breach of personal health information (“PHI”) when four unencrypted laptop computers were stolen from Advocate’s administrative offices. The computers collectively contained the PHI, including names, addresses, dates of birth, Social Security Numbers, diagnoses, […]
The Federal Trade Commission (“FTC”) is urging Congress to ensure the data brokerage industry becomes more transparent and accountable, which could change the way consumers’ personal, health-related information is gathered and shared. These recommendations may change the landscape of the HIPAA regulations to better ensure protection of sensitive health information. On May 27, 2014, the […]
A Massachusetts dermatology practice, APDerm, has agree to make a $150,000 payment and enter into a corrective action plan with the U.S. Department of Health and Human Services’ Office for Civil Rights in order to settle potential violations of HIPAA Privacy, Security, and Breach Notification Rules. According to HHS, this is the first settlement entered […]
The managed care company WellPoint Inc. has reached a Resolution Agreement with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR) to settle allegations that it violated the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules. WellPoint agreed to pay $1.7 million in connection with this settlement. […]
This afternoon, the Department of Health and Human Services posted a long-awaited, 563-page omnibus final rule under HIPAA, which will be published in the Federal Register on January 25, 2013, and which makes a variety of modifications to HIPAA’s Privacy, Security, Breach Notification, and Enforcement Rules. According to the executive summary of the rule, these modifications are […]