Press release for HHS Office for Civil Rights Reaches Agreement with Health Care Provider in New Jersey That Disclosed PHI in Response to Negative Online Review
The U.S. Department of Health and Human Services' Office for Civil Rights has settled with MedEvolve for $350,000 over potential HIPAA violations regarding a data breach in which a server containing protected health information was left unsecure and accessible over the internet. MedEvolve provides practice management, revenue cycle management and practice analytics software
For small providers, the HIPAA rules can be confusing. They also are more than 20 years old. Under the HIPAA Right of Access Initiative, the Office of Civil Rights' settlement resulted in a $15,000 resolution amount and required compliance with a two year corrective action plan.