Link to article

The United States Department of Health and Human Services Office for Civil Rights (“OCR”) sent a strong HIPAA enforcement message this summer, entering four resolution agreements, including the highest financial settlement to date, and announcing an initiative to investigate smaller breaches more widely. Each new resolution agreement resulted from self-reported breaches and demonstrates OCR’s focus on portable electronic device.