OCR

Head In the Sand Leads to HIPAA Fine

By Matt Fisher – Continuing a hot streak in the fall of 2020, the Office for Civil Rights announced another HIPAA settlement with a business associate on September 23, 2020. The $2,300,000 fine was imposed on a business associate following a months long cyberattack that resulted in the exfiltration of data for more than 6 million patients.


Deny Patient Access at Own Risk

By Matt Fisher – The Office for Civil Rights continues its recent attention to enforcing an individual’s right of access under HIPAA. The latest step is the concurrent announcement of five settlements with various entities for alleged failures to provide records upon request.


Wish You Were Here!

By Art Gross – It’s always nice to get a postcard from friends or family who are away on vacation. But this week we learned of a new kind of postcard being sent out with not-so-well wishes. The HHS Office for Civil Rights is warning on fraudulent postcards to HIPAA Privacy and Security Officers.





Lenient Doesn’t Mean Lazy

By Art Gross – In mid-March, the U.S. Department of Health and Human Services Office for Civil Rights announced that they would use “enforcement discretion” in regard to HIPAA compliance with telehealth. And, the healthcare community gave out a collective sigh of relief.


HIPAA In Front of the Camera

By Matt Fisher – HIPAA and the media can be a risky combination for healthcare organizations. Prior HIPAA settlements imposed by the Office for Civil Rights have dinged hospitals for allowing reality television shows to be filmed in the hospital and speaking with a reporter to refute a patient complaint.