BCBST to Pay $1,500,000 to HHS for HIPAA Violation
According to the HITECH Breach Notification Rule any impermissible use or disclosure of protected health information (PHI), or “breach,” of 500 individuals or more should be reported to HHS and the media. Similarly, smaller breaches affecting less than 500 individuals have to be reported to the secretary on an annual basis. As the first enforcement…