Published Photos of COVID Patients Lead to $80,000 HIPAA Settlement | Practical Law
The Department of Health and Human Services (HHS) has announced an $80,000 settlement of potential Privacy Rule violations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) involving a New York-based, nonprofit academic medical center (and HIPAA covered entity (CE)). The enforcement action arose after a national news organization published an article about the medical center's COVID-19 response efforts that included photographs and information about patients being treated for COVID-19 at the medical center.