Malware Cyberattack Leads to $875,000 HIPAA Settlement | Practical Law
The Department of Health and Human Services (HHS) has announced a settlement of potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) involving a research university's health sciences center (and HIPAA covered entity). The university will pay $875,000 to settle the potential violations and must take corrective measures that include a comprehensive risk analysis and risk management plan.