[benefits] blog logo

HHS Settlement with HIPAA Covered Entity Exacts $2.5 Million Penalty for Non-compliance

The U.S. Department of Health and Human Services?ÇÖ Office for Civil Rights (?Ç£OCR?Ç¥) recently announced a $2.5 million HIPAA privacy and security settlement with CardioNet, a wireless health services provider and covered entity under HIPAA, based on CardioNet?ÇÖs impermissible disclosure of unsecured electronic protected health information (?Ç£EPHI?Ç¥). The disclosure occurred when a laptop computer belonging to a member of CardioNet?ÇÖs workforce, which contained the unsecured EPHI of 1,391 individuals, was stolen from a parked vehicle outside of the workforce member?ÇÖs home. CardioNet reported the breach to OCR and an investigation ensued, pursuant to which OCR determined that (i) CardioNet did not have a sufficient risk analysis and risk management process in place at the time of the theft, (ii) CardioNet had never actually implemented its draft policies and procedures for compliance with HIPAA?ÇÖs security rules, and (iii) CardioNet was unable to produce any final policies or procedures regarding the implementation of safeguards for EPHI, including those for mobile devices. To resolve these issues, CardioNet agreed to pay a $2.5 million penalty and to implement a corrective action plan.

This settlement is another example of the large penalties that HIPAA covered entities, including employer-sponsored group health plans, may be forced to pay to settle HIPAA privacy or security breach actions. The federal government has gotten more aggressive with imposing large fines for violations of these rules and thus employers are well advised to be proactive to ensure compliance.

View the OCR Press Release?áannouncing the settlement with CardioNet.

The lawyers of our Employee Benefits and Executive Compensation Practice Group are readily able to assist companies on a nationwide basis with implementing sophisticated benefit plans and providing answers to their most challenging compensation issues. Additionally, our lawyers are well aware of the daily employee benefits challenges facing companies of all sizes and are capable of helping in-house lawyers and human resources personnel with the day-to-day advice and guidance necessary to properly administer employee benefits plans.

Leave a Reply

May 2017