Blog: Cancer Care Group Reaches Agreement to Settle Alleged HIPAA Violations

Cooley LLP
Contact

Last week, Cancer Care Group, P.C. (CCG), an Indiana radiation oncology practice, agreed to settle alleged violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) by paying $750,000 and adopting a three year corrective action plan.

CCG first reported a HIPAA breach to the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) in August of 2012, after a laptop bag containing both a laptop and unencrypted computer server backup media was stolen from an employee’s car.  The backup media contained the electronic Protected Health Information of about 55,000 patients and included Social Security numbers, clinical information, and insurance information, among other identifying features.  OCR investigated the breach report and found that, prior to the breach, CCG was generally out of compliance with the HIPAA Security Rule.  CCG had not conducted a risk analysis, nor had CCG adopted policies or procedures regarding the removal of hardware and electronic media containing Protected Health Information from the CCG facility.

In addition to agreeing to pay $750,000, CCG entered into a corrective action plan for three years.  Pursuant to this corrective action plan, CCG must: conduct a risk analysis and submit such analysis to OCR; review and update its risk analysis at least annually; review and revise its HIPAA security policies and procedures; revise its HIPAA security training; and issue regular reports to OCR, among other obligations.

This settlement has been added to Cooley’s “Select HIPAA Privacy and Security Enforcement Actions Tracker” that may be accessed on the right side of this page or under the “Resources” tab above.

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Cooley LLP | Attorney Advertising

Written by:

Cooley LLP
Contact
more
less

Cooley LLP on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.