HHS Closes Out 2013 With 6th Resolution Agreement

Throughout 2013, HHS OCR has stated that covered entities of all sizes need to give priority to securing ePHI.  In addition, HHS OCR has recommended that covered entities identify and mitigate risks before an incident occurs.  HHS OCR's enforcement activity during 2013 has focused on covered entities large and small.  To end 2013, HHS OCR has issued its 6^th resolution agreement with Adult & Pediatric Dermatology, P.C. (APDerm), a private practice that delivers dermatology services in four locations in Massachusetts and two in New Hampshire.  APDerm has agreed to a $150,000 resolution amount and corrective action plan to correct deficiencies in its HIPAA compliance program.  This resolution agreement is HHS OCR's first settlement pertaining to a covered entity's failure to have policies and procedures in place to address the breach notification provisions of the HITECH Act, passed as part of American Recovery and Reinvestment Act of 2009 (ARRA).