Becker's Healthcare June 3, 2024
UnitedHealth Group’s Change Healthcare is responsible for notifying affected individuals about data privacy breaches that occurred as a result of the cyberattack on the company in late February, HHS said May 31.
“Affected covered entities that want Change Healthcare to provide breach notifications on their behalf should contact Change Healthcare,” HHS Office for Civil Rights Director Melanie Fontes Rainer said in a news release. “We encourage all parties to take the necessary steps to ensure that the HIPAA breach notifications are prioritized.”
In March, the agency launched an investigation into UnitedHealth regarding the company’s compliance with HIPAA reporting requirements in relation to the data breach. HHS’ new announcement will allow Change to file breach notifications on behalf of affected providers,...