Articles and Blogs

On November 27, 2019, the Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced that an Affiliated Covered Entity made up of 10 hospital covered entities (“ACE Organization”) will pay a penalty of $2.175 million and enter into a two-year Corrective Action Plan (“CAP”) to settle potential violations of the Health... READ MORE

On October 23, 2019, the Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced a civil monetary penalty (“CMP”) of $2,154,000 against a nonprofit academic health system (“Health System”) for violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). The Notice of Proposed Determination and the Notice of... READ MORE

Under the Breach Notification Rule, HIPAA covered entities are required to submit reports of certain breaches of unsecured protected health information (“PHI”) affecting fewer than 500 individuals to the Office for Civil Rights (“OCR”) on an annual basis. Covered entities must submit their breaches electronically through OCR’s breach notification web page, which can be... READ MORE