HIPAA News Releases

OCR released frequently asked questions about the Health Insurance Portability and Accountability Act (HIPAA) right of access related to apps designated by the individual and application programming interfaces (APIs) used by the provider’s electronic health record system. This release was in conjunction with CMS and ONC announcing that they are extending the public comment period by 30 days for two proposed regulations aimed at promoting the interoperability of health information technology and enabling patients to electronically access their health information.

OCR Launches Public Education Campaign About Civil Rights Protections in Response to the National Opioid Crisis - October 25, 2018

Today, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) launched a public education campaign on civil rights protections in response to the national opioid crisis. The materials inform the public about civil rights protections that may apply to a person in recovery from an opioid addiction and ensure that covered entities are aware of their obligation to comply with federal nondiscrimination laws.

Anthem pays OCR $16 Million in record HIPAA settlement following largest health data breach in history – October 15, 2018

Unauthorized Disclosure of Patients’ Protected Health Information During ABC Doumentary Filming Results in Multiple HIPAA Settlements Totaling $999,000 – September 20, 2018

A previous version of this release mistakenly identified the TV series as “Boston Med.” “Boston Med,” also an ABC television series, was not involved in this investigation.

OCR Issues Guidance to Help Ensure Equal Access to Emergency Services and the Appropriate Sharing of Medical Information During Hurricane Florence

In preparation for Hurricane Florence, OCR has issued a press release providing resources and effective practices to help emergency responders and officials effectively serve at-risk populations and ensure that the whole community is included in emergency response and recovery efforts. OCR continues to coordinate with our sister agencies and federal partners to make sure that responsible officials are mindful of all segments of the community as they prepare for disaster response in the areas affected by Hurricane Florence.

Judge rules in favor of OCR and requires a Texas cancer center to pay $4.3 million in penalties for HIPAA violations - June 18, 2018

Consequences for HIPAA violations don’t stop when a business closes - February 13, 2018

Five breaches add up to millions in settlement costs for entity that failed to heed HIPAA’s risk analysis and risk management rules - February 1, 2018

Failure to protect the health records of millions of people costs entity millions of dollars - December 28, 2017

HHS Office for Civil Rights Issues Guidance on how HIPAA Allows Information Sharing to Address the Opioid Crisis - October 27, 2017

Careless handling of HIV information jeopardizes patient’s privacy, costs entity $387k - May 23, 2017

Texas health system settles potential HIPAA violations for disclosing patient information - May 10, 2017

$2.5 million settlement shows that not understanding HIPAA requirements creates risk - April 24, 2017

No Business Associate Agreement? $31K Mistake - April 20, 2017

Overlooking risks leads to breach, $400,000 settlement - April 12, 2017

$5.5 million HIPAA settlement shines light on the importance of audit controls - February 16, 2017

Lack of timely action risks security and costs money - February 1, 2017