UCLA has developed a mixed record of disclosure with respect to its most recent security breach of PHI that was reported as a theft of an other portable electronic device on September 7, 2011.
Continue Reading The Parade of PHI Security Breaches: UCLA Rejoins the March and Merits Mixed Reviews for the Quality of its Public Disclosures

As reported by Ben Keller, at DataGuidance.com, Indiana Attorney General Greg Zoeller announced, on July 5, 2011, that health insurer WellPoint Inc. has agreed to pay $100,000 for a PHI security breach that occurred between October 2009 and March 2010.
Continue Reading The Parade of PHI Security Breaches: WellPoint Finally Settles with the Attorney General of Indiana

Last week for the first time, the Office for Civil Rights of HHS reported exacting heavy financial obligations from (i) Cignet Health on February 22, 2011, with a $4.3 million civil monetary penalty assessment for violations of the HIPAA Privacy Rule, and (ii) Massachusetts General Hospital on February 24, 2011, for a settlement that includes a payment to the U.S. government of $1,000,000 for potential violations of HIPAA.
Continue Reading New Turn in the Parade of PHI Breaches: Office of Civil Rights Exacts Heavy Payments From Cignet Health and Massachusetts General Hospital

As reported previously on this blog, the requirements under the HIPAA/HITECH statutes and regulations for public disclosure of security breaches of Protected Health Information (“PHI”) have continuously been bringing to

Continue Reading The Parade of PHI Security Breaches – Providers and Insurers Beware of Attorney General Richard Blumenthal and Other Attorneys General