Share on LinkedInShare on LinkedIn

ARTICLE · 01 APRIL 2012

HIPAA/HITECH Enforcement Action Alert

If you report a significant data breach to the Department of Health and Human Services (HHS), you may face a follow-up investigation and possible enforcement action.

United StatesEmployment and HR
Lauren Licastro
Lauren Licastro

Health Plan Agrees To Pay $1.5 Million Following HHS Investigation Of Self-Reported Data Breach.

If you report a significant data breach to the Department of Health and Human Services (HHS), you may face a follow-up investigation and possible enforcement action.

The Health Information Technology for Economic and Clinical Health (HITECH) Act requires entities covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to report data breaches affecting 500 or more individuals to HHS and the media, in addition to notifying the affected individuals. HHS pays close attention to these breach reports and initiates investigations of those it deems significant, as evidenced by its recently announced settlement with BlueCross BlueShield of Tennessee (BlueCross).

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

See more popular content from