• Home
  • Blog
  • Contact
HIPAA ComplianceHIPAA Compliance
HIPAA ComplianceHIPAA Compliance
  • Home
  • Blog
  • Contact

Prison Time for Privacy Breach of PHI; OCR Breach List Continues to Grow; More Training Needed

April 30, 2010 American Recovery and Reinvestment Act, Enforcement, Health IT and HITECH, Privacy, Security No Comments

Health Data Management  reported in its April 29, 2010, online HDM Daily that “[a] former researcher at the UCLA School of Medicine has been sentenced to four months in federal prison for violations of the HIPAA privacy rule.”  You may access and read the article by Joseph Goedert,  “Prison for HIPAA Privacy Violater“.

On the same day, April 29, the Office for Civil Rights (OCR) of the Department of Health and Human Services (HHS) reported on its Web site 67 entities reporting “Breaches Affecting 500 or More Individuals” over the period September 22, 2009 to March 19, 2010.  That is up from the 36 that OCR listed on its initial posting of the list on February 23, 2010.  The current list is available on the OCR Web site.

Clearly, more “awareness and understanding” training on security safeguards and privacy controls regarding use and disclosure of protected health information (PHI) is necessary.  Such training is required under the HIPAA Privacy and Security Rules and includes training regarding the new HITECH Act Breach Notification Rule requirements.

HIPAA.com will have announcements about such training in May, offerred through HIPAA School.  You may register on the hipaa.com site for email notification of further details about HIPAA School training, and for postings provided on hipaa.com.  (20100429)

Tags: awareness and understandingbreach notification rulebreachesDEPARTMENT OF HEALTH AND HUMAN SERVICESHDMhealth data managementHHSHIPAA PRIVACY RULEHIPAA Security RuleOCROffice for Civil RightsPHIposted breachesprisonprivacy breachprotected health informationTrainingUCLA School of Medicine
No Comments
Share
0

You also might be interested in

Data Quality and Integrity Key Privacy/Security Principle of Meaningful Use 2011 Objectives

Jul 2, 2009

On December 15, 2008, the Office of the National Coordinator[...]

Today, February 17, Business Associates Must be in Compliance with HIPAA Security Rule

Feb 17, 2010

Today, Wednesday, February 17, 2010, Business Associates of Covered Entities[...]

hipaa compliance checklist

Five HIPAA Compliance Activities Your Organization Must Undertake

Aug 23, 2012

HIPAA Administrative Simplification was enacted on August 21, 1996 as[...]

Leave a Reply Cancel Reply

Categories

  • 5010
  • American Recovery and Reinvestment Act
  • Enforcement
  • GINA
  • Health Care Reform
  • Health IT and HITECH
  • HIPAA Law
  • Identifiers
  • Meaningful Use
  • Privacy
  • Red Flags Rules
  • Security
  • Transactions & Code Sets
  • Uncategorized

Recent Posts

  • Contracting with Vendors that are NOT HIPAA Business Associates: Best Practices
  • HIPAA Breach: Who You Gonna Call?
  • Can I Be Sued for a HIPAA Violation?
  • Business Associate Agreements – a First Look at Indemnification
  • Gmail, Google Apps for Business HIPAA Business Associate Agreements

Archives

Contact Us

We're currently offline. Send us an email and we'll get back to you, asap.

Send Message
HIPAA- Health Insurance Portability Accountability Act

© 2023 · hipaa.com

Prev Next