Sending out a mass mailing of a pamphlet that contained Medicare beneficiary numbers resulted in a civil monetary penalty of $6,768,000 for Triple-S Salud, Inc. (TSS), a Puerto Rican health insurance subsidiary.
The HITECH Act, which included changes to the HIPAA Privacy and Security Rules, was signed into law by President Obama in February 2009-a full five years ago.