In 2012, CompletePT Pool & Land Physician Therapy in Los Angeles posted online patient testimonials including full names and photos. HHS' Office for Civil Rights received a complaint alleging the physical therapy practice did not receive proper authorization to disclose protected health information.
Now, the practice has agreed to pay $25,000 to settle the HIPAA violation allegations. CompletePT Pool & Land Physician Therapy will also implement a corrective action plan and report compliance efforts for a one-year period.
"All covered entities, including physical therapy providers, must ensure that they have adequate policies and procedures to obtain an individual's authorization for such purposes, including for posting on a website and/or social media pages, and a valid authorization form," said OCR Director Jocelyn Samuels, according to the HHS settlement report.