HHS Takes First Enforcement Action Over Reporting of HIPAA Breach

The HHS investigation showed Presence Health failed to notify, without unreasonable delay and within 60 days of discovering the breach, each of the 836 individuals affected by the breach, prominent media outlets (as required for breaches affecting 500 or more individuals), and OCR.

The U.S. Department of Health and Human Services' Office for Civil Rights on Jan. 9 announced the department's first Health Insurance Portability and Accountability Act (HIPAA) settlement based on the untimely reporting of a breach of unsecured protected health information (PHI), saying Presence Health has agreed to settle potential violations of the HIPAA Breach Notification Rule by paying $475,000 and implementing a corrective action plan.

The agency described Chicago-based Presence Health as one of the largest health care networks serving Illinois, with about 150 locations, including 11 hospitals and 27 long-term care and senior living facilities, as well as physicians' offices and health care centers, home care, hospice care, and behavioral health services. "With this settlement amount, OCR balanced the need to emphasize the importance of timely breach reporting with the desire not to disincentive breach reporting altogether," the agency's announcement states.

It says the office received a breach notification report from Presence Health on Jan. 31, 2014. It indicated that, on Oct. 22, 2013, Presence discovered that paper-based operating room schedules that contained the PHI of 836 individuals were missing from the Presence Surgery Center at the Presence St. Joseph Medical Center in Joliet, Ill., and that the data included affected individuals' names, dates of birth, medical record numbers, dates of procedures, types of procedures, surgeon names, and types of anesthesia. OCR's investigation revealed that Presence Health failed to notify, without unreasonable delay and within 60 days of discovering the breach, each of the 836 individuals affected by the breach, prominent media outlets (as required for breaches affecting 500 or more individuals), and OCR.

"Covered entities need to have a clear policy and procedures in place to respond to the Breach Notification Rule's timeliness requirements," said OCR Director Jocelyn Samuels. "Individuals need prompt notice of a breach of their unsecured PHI so they can take action that could help mitigate any potential harm caused by the breach."

The Resolution Agreement and Corrective Action Plan are available here.

OCR's guidance on breach notification may be found at http://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html.

Product Showcase

  • Magid® D-ROC® GPD412 21G Ultra-Thin Polyurethane Palm Coated Work Gloves

    Magid’s 21G line is more than just a 21-gauge glove, it’s a revolutionary knitting technology paired with an advanced selection of innovative fibers to create the ultimate in lightweight cut protection. The latest offering in our 21G line provides ANSI A4 cut resistance with unparalleled dexterity and extreme comfort that no other 21-gauge glove on the market can offer! Read More

  • Safety Knives

    The Safety Knife Company has developed a quality range of safety knives for all industries. Designed so that fingers cannot get to the blades, these knives will safely cut through cardboard, tape, strapping, shrink or plastic wrap or a variety of other packing materials. Because these knives have no exposed blades and only cut cardboard deep, they will not only protect employees against lacerations but they will also save product. The Metal Detectable versions have revolutionary metal detectable polypropylene knife bodies specifically for the food and pharmaceutical industries. This material can be detected and rejected by typical detection machines and is X-ray visible. Read More

  • HAZ LO HEADLAMPS

    With alkaline or rechargeable options, these safety rated, Class 1, Div. 1 Headlamps provide long runtime with both spot and flood options in the same light. Work safely and avoid trip hazards with flexible hands-free lighting from Streamlight. Read More

Featured

Artificial Intelligence

Webinars