Increased Enforcement and Litigation Risk for Data Breaches Involving Personal Health Information

HIPAA and HITECH have long been high priority concerns for health care and life sciences organizations. But recent developments in HIPAA enforcement and data breach litigation raises the threat level for all companies dealing with personal health information (PHI). On the enforcement front, on February 1, 2018, HHS’s Office of Civil Rights — which enforces HIPAA privacy, security, and breach notification rules — announced a $3.5 million settlement with Fresenius Medical Care North America to resolve several potential HIPAA violations. In 2013, Fresenius filed five…
Continue reading...