October 28, 2020

Volume X, Number 302

Advertisement

October 27, 2020

Subscribe to Latest Legal News and Analysis

October 26, 2020

Subscribe to Latest Legal News and Analysis

Orthopedic Clinic Pays $1.5 Million for HIPAA Breaches

On September 21, 2020 the U.S. Department of Health and Human Services, Office for Civil Rights (“HHS”) announced a $1,500,000 settlement with Athens Orthopedic Clinic PA (“Athens Orthopedic”) for violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules.

According to HHS, hackers accessed the Athens Orthopedic electronic medical records system in 2016 and stole the data of over 200,000 patients.  This data included patient name, date of birth, social security number, medical procedures, test results, and health insurance information.  The hackers access to the electronic medical records for over a month, including for several weeks after Athens Orthopedic knew of the breach.

According to the HHS press release, “OCR’s investigation discovered longstanding, systemic noncompliance with the HIPAA Privacy and Security Rules by Athens Orthopedic including failures to conduct a risk analysis, implement risk management and audit controls, maintain HIPAA policies and procedures, secure business associate agreements with multiple business associates, and provide HIPAA Privacy Rule training to workforce members.”

In additional to the monetary settlement, Athens Orthopedics agreed to a very thorough and detailed two-year Corrective Action Plan.

Read the HHS Resolution Agreement and the Corrective Action Plan.

©2020 Strassburger McKenna Gutnick & GefskyNational Law Review, Volume X, Number 266
Advertisement

TRENDING LEGAL ANALYSIS

Advertisement
Advertisement

About this Author

Danielle L. Dietrich SMGG Attorney Pittsburgh, PA
Shareholder

Danielle L. Dietrich, Shareholder in the Pittsburgh Office of SMGG, focuses her practice in the areas of women and diverse-owned businesses, healthcare, elder law and litigation.  She has a broad range of experience in providing legal counsel and advice to her clients (both large and small), as well as having handled a wide range of disputes and litigation in Pennsylvania, Ohio and West Virginia.

A large portion of Ms. Dietrich’s practice focuses on the representation of women and diverse-owned businesses.  That practice includes assisting these...

(412) 281-5423
Advertisement
Advertisement