Category: HIPAA Settlement: Dumping of PHI Results In $2.25M Settlement

noreply@blogger.com (RCoffield@fsblaw.com)
span style=”;font-family:Times New Roman;font-size:100%;” This week’s settlement by CVS, the nations largest retail pharmacy chain, to pay the U.S. government a $2.25 million settlement and take corrective action highlights the need for providers and other covered entities to focus on the simple privacy protections such as appropriately disposing of patient information […]

John Goodman
Today the Office of the National Coordinator for Health Information Technology (ONCHIT) issued a href=”http://www.hhs.gov/healthit/documents/NationwidePS_Framework.pdf”The Nationwide Privacy and Security Framework for Electronic Exchange of Individually Identifiable Health Information/a. The summary states that the framework creates a set of principles and consistent approach to:br /blockquote”. . .address the privacy and security challenges […]

jsidorov
My favorite fellow HIPAA blogger, Jeff Drummond, over at the HIPAA Blog points out the Office for Civil Rights has issued new guidance for providers to follow when assessing whether or not they should provide protected health information (PHI) to the friends or family of a patient under HIPAA Privacy Rule 164.510(b).
The guidance […]

noreply@blogger.com (RCoffield@fsblaw.com)
The a href=”http://www.hhs.gov/”U.S. Department of Health and Human Services/a (HHS) issued a a href=”http://www.hhs.gov/ocr/privacy/enforcement/resolution.html”press release/a last Thursday that it had entered into a a href=”http://www.hhs.gov/ocr/privacy/enforcement/agreement.pdf”Resolution Agreement/a with Seattle-based a href=”http://www.providence.org/home/default.htm”Providence Heath amp; Services/aa href=”http://www.hhs.gov/ocr/hipaa/”Health Insurance Portability and Accountability Act of 1996 (HIPAA) privacy and security rules/a. The agreement calls for Providence to […]

Scott MacStravic
The U.S. Department of Health and Human Services (HHS) issued a press release last Thursday that it had entered into a Resolution Agreement with Seattle-based Providence Heath & Services to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) privacy and security rules. The agreement calls for […]

noreply@blogger.com (RCoffield@fsblaw.com)
DHHS and the Office for Civil Rights (OCR) have added new enforcement statistics and data to the OCR HIPAA Privacy and Compliance and Enforcement site. Previously, I’ve posted about the statistics.
OCR added new information broken down by the following topics:
Charts showing state-specific case investigation results (West Virginia shows (see the graphic above): […]