On May 11, 2021, the dermatology office filed a breach report with OCR saying that empty specimen containers affixed with patient data were put in its garbage bin after a third-party security guard discovered one in the parking lot, according to an OCR report.
OCR found potential HIPAA violations for the impermissible use and disclosure of protected health information and failure to maintain appropriate safeguards. OCR said the dermatology office regularly disposed of specimen containers with unaltered patient labels in an exterior dumpster between Feb. 4, 2011, and March 31, 2021.
On top of the monetary settlement, New England Dermatology & Laser Center agreed to undergo a corrective action plan and two years of monitoring.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
