[ Tuesday, June 26, 2012 ]
Alaska Medicaid Agency hit for $1.7 Million:
That's right, even state agencies can get tagged for HIPAA violations. It seems the Alaska Department of Health and Social Services
suffered a data breach when somebody stole a portable hard drive from an employee's car. I'm guessing the data wasn't encrypted. It seems that when OCR investigated, it became clear that DHSS hadn't done the basic security stuff, like risk analysis and security training.
Hat tip: Theresa Defino and Alan Goldberg.
Jeff [4:31 PM]
Blogger: HIPAA Blog - Edit your Template