The OCR began investigating Dr. Porter’s practice after he filed a notice of a data breach due to a dispute with a business associate. After an investigation, the OCR determined that Dr. Porter failed to conduct a risk analysis when the breach was reported.
Additionally, although Dr. Porter had significant technical assistance through the investigation, he never implemented security measures sufficient to reduce risks and vulnerabilities.
“All healthcare providers, large and small, need to take their HIPAA obligations seriously,” said OCR Director Roger Severino. “The failure to implement basic HIPAA requirements, such as an accurate and thorough risk analysis and risk management plan, continues to be an unacceptable and disturbing trend within the healthcare industry.”
Along with paying $100,000, Dr. Porter agreed to complete a corrective action plan, which includes two years of monitoring.
More articles on cybersecurity:
Texas provider alerts 6,500 patients of phishing attack
Connecticut payer alerts 1,100 members of phishing attack
10 tips for hospitals to mitigate ransomware attacks
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit
