HHS Claims a Record Haul With $5.55 Million HIPAA Settlement | Practical Law
The Department of Health and Human Services (HHS) has announced a settlement of multiple potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) involving an Illinois-based health care system. The health care system will pay $5.55 million, the largest amount to date against a single entity, to settle the potential HIPAA violations. It must also carry out extensive corrective measures that include a comprehensive risk analysis, risk management plan, and review by a third-party accessor.