Data Breach, Education, HIPAA / HITECH Enforcement, News Events, OCR HIPAA Audits, Settlements

Recent Enforcement Actions

Recent Enforcement ActionsData Breach Four examples

Just when we thought our information was up to date!

On Tuesday February 13, 2018, the HHS Office for Civil Rights announced that “Consequences for HIPAA violations don’t stop when a business closes”.  Filefax, Inc. located in Northbrook, Illinois is no longer in business after an anonymous complaint that Protected Health Information (PHI)  destined for the shredding/recycling facility was left unattended in an unlocked truck (alleged date February 6 & 9, 2015). OCR’s investigation reported that Filefax, Inc. impermissibly disclosed the PHI of 2,150 individuals at the Filefax parking lot by granting an unauthorized person to remove the PHI from Filefax and leaving it unsecured outside their facility.Filefax Inc

During the 2016 court ruling in an unrelated litigation, a receiver was appointed to liquidate Filefax’s assets for distribution to creditors, etc. The receiver agreed to pay $100,000 monetary settlement and to store/dispose of the remaining medical records discovered at the Filefax’s facility in accordance to HIPAA’s standards.

View the Press Release 

Advertisements
Education, HIPAA / HITECH Enforcement, Tip of the Week

Did You Know?

The Office for Civil Rights (OCR) has teamed up with the Office of the National Coordinator for Health Information Technology and created information to help you understand your rights under HIPAA.

Through the federal civil rights laws and Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule, OCR protects your fundamental nondiscrimination and health information privacy rights by:

  • Teaching health and social service workers about civil rights, health information privacy, and patient safety confidentiality laws
  • Educating communities about civil rights and health information privacy rights
  • Investigating civil rights, health information privacy, and patient safety confidentiality complaints to identify discrimination or violation of the law and take action to correct problems.

The Office of the National Coordinator for Health Information Technology (ONC) is at the forefront of the administration’s health IT efforts and is a resource to the entire health system to support the adoption of health information technology and the promotion of nationwide health information exchange to improve health care. ONC is organizationally located within the Office of the Secretary for the U.S. Department of Health and Human Services (HHS).

ONC is the principal federal entity charged with coordination of nationwide efforts to implement and use the most advanced health information technology and the electronic exchange of health information. The position of National Coordinator was created in 2004, through an Executive Order, and legislatively mandated in the Health Information Technology for Economic and Clinical Health Act (HITECH Act) of 2009.

For more information visit: www.HHS.gov  and www.healthit.gov/