HHS OCR Settles With iHealth Solutions Over Alleged HIPAA Violations

On June 28, the US Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced a settlement (resolution agreement and corrective action plan) with iHealth Solutions (also known as Advantum Health) over the alleged disclosure of protected health information through an unsecured server in violation of the Health Insurance Portability and Accountability Act (HIPAA). As part of the settlement, iHealth, a business associate that provides coding, billing, and information technology services to healthcare providers, was fined $75,000 and must implement a corrective action plan to resolve potential HIPAA Privacy and Security Rules violations, as well as increase the security of its electronic protected health information (ePHI).