Pulse February 23, 2024
On February 22, 2024, the HHS Office for Civil Rights announced its second settlement of alleged HIPAA violations stemming from a ransomware attack. The settlement marked the second such action announced in 2024, which hints at more to come. The expectation of more settlements would certainly match the approach that has been taken with problems surrounding the individual right of access.
Latest Ransomware Settlement
The announced settlement was with Green Ridge Behavioral Health (“Green Ridge”) stemming from a required breach notification. Getting into the specifics, Green Ridge reported breach impacting records of over 14,000 patients on February 11, 2019. OCR launched its investigation on December 12, 2019. That is where the problems started to cascade.
In the resolution agreement, OCR...
Today's Sponsors
Today's Sponsor