Significant Monetary Penalties Assessed For HIPAA Violations


The U.S. Department of Health and Human Services (HHS) has recently imposed significant penalties against two entities for violation of the Health Insurance Portability and Accountability Act of 1996 (HIPAA), signaling the government's intent to seriously enforce the HIPAA privacy requirements. In one case, Cignet Health (Maryland) was fined $4.3 million dollars for failing to comply with the HIPAA requirement to provide patients with access to their medical records (actually, $1.3 million for failing to provide the records, and $3 million for not cooperating wit the government's investigation). The allegations involved the alleged failure of Cignet to provide 41 individuals access to their records between September 2008 and October 2009. During the course of the investigation, Office for Civil Rights (OCR) of the HHS (the office of enforcement of the HHS for HIPAA privacy issues) determined that Cignet willfully neglected the obligation to cooperate with OCR and did not attempt to resolve the patient issues. The penalty, which was significant in amount, is the first such assessment by HHS for failure to comply with the HIPAA requirements.

Continuing its enforcement of HIPAA, two days after the Cignet penalty was imposed, HHS agreed to resolve an issue with General Hospital Corporation and Massachusetts General Physicians Organization, Inc. (Mass General) regarding loss of patient records by an employee of an outpatient practice.

Please see full article below for more information

LOADING PDF: If there are any problems, click here to download the file.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Constangy, Brooks, Smith & Prophete, LLP | Attorney Advertising

Written by:


Constangy, Brooks, Smith & Prophete, LLP on:

Popular Topics
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.

Already signed up? Log in here

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.