The University of Rochester Medical Center recently settled a HIPAA enforcement action brought by New York State Attorney General Eric Schneiderman, paying a $15,000 fine and entering into a corrective action plan.

The settlement is a reminder to HIPAA covered entities that state attorneys general—in addition to the HHS Office for Civil Rights—have the authority to bring forward HIPAA civil actions. It’s a message that Schneiderman highlighted in an announcement of the regulatory action. “This settlement strengthens protections for patients at URMC and it puts other healthcare entities on notice that my office will enforce HIPAA data breach provisions.”

Register or login for access to this item and much more

All Information Management content is archived after seven days.

Community members receive:
  • All recent and archived articles
  • Conference offers and updates
  • A full menu of enewsletter options
  • Web seminars, white papers, ebooks

Don't have an account? Register for Free Unlimited Access