HIPAA settlement demonstrates importance of implementing safeguards for ePHI

The U.S. Department of Health and Human Services, Office for Civil Rights (OCR), has announced a Health Insurance Portability and Accountability Act of 1996 (HIPAA) settlement based on the impermissible disclosure of unsecured electronic protected health information (ePHI).  MAPFRE Life Insurance Company of Puerto Rico has agreed to settle potential noncompliance with the HIPAA Rules by paying $2.2 million and implementing a corrective action plan.

• Read the HHS Press Release
  Comunicado de prensa (Spanish), opens in a new tab
• Read the Resolution Agreement and Corrective Action Plan, opens in a new tab