The HHS Office for Civil Rights began investigating Adult & Pediatric Dermatology in Concord, Mass., after receiving a report of a stolen thumb drive containing the protected health information of 2,200 people. The OCR found the practice did not conduct a thorough investigation of the theft in accordance with HIPAA rules and did not comply with the HIPAA Breach Notification Rule.
This case marks HHS’ first settlement with a HIPAA-covered entity for not having proper breach procedures and policies in place.
More Articles on Data Breaches:
Computer Stolen From Inspira Medical Center Vineland
9 Recent Healthcare Data Breaches
Subcontractor Exposes Patient Information From Fairfax County Community Health Care
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.