HIPAA Blog

[ Thursday, January 09, 2025 ]

 

PHI Deletion Nets $337,750 Fine: This is a bit of an odd one: a Florida HIPAA business associate, USR Holdings, discovered that an unauthorized third party had access to its database for 3-4 months and deleted PHI of 2903 people.  The normal problems were there: failure to conduct a risk assessment, no risk management plan, no system activity review, and no backups.  The result was a $337,750 fine and a 2-year monitoring plan.

Here's the resolution agreement.


Jeff [1:08 PM]

Comments: Post a Comment
http://www.blogger.com/template-edit.g?blogID=3380636 Blogger: HIPAA Blog - Edit your Template