The U.S. Department of Health and Human Services (HHS) increased civil monetary penalties for HIPAA administrative simplification violations on November 5 in accordance with the Federal Civil Penalties Inflation Adjustment Act Improvements Act of 2015.
Aegis Medical Group, a physician practice in Mount Dora, Florida, recently notified 9,800 patients that their protected health information (PHI) may have been accessed by a former employee.
The Office of Civil Rights (OCR) recently imposed a $1.6 million civil penalty against the Texas Health and Human Services Commission (TX HHSC) for a data breach that enabled unauthorized individuals to view the protected health information (PHI) of 6,617 individuals.
The University of Rochester Medical Center (URMC) recently paid a $3 million civil monetary penalty to the Office for Civil Rights for HIPAA violations that include failing to encrypt mobile devices. URMC is one of the largest health systems in New York with more than 26,000 employees.