First Civil Monetary Penalty Administered by HHS for Violation of the HIPAA Privacy Rule

Cignet Health (Cignet) has become the first covered entity to be issued a civil monetary penalty. The HHS Office of Civil Rights (OCR) has imposed a penalty of $4.3 million. The violations were a result of the new rules and regulations set forth in Section 13410(d) of the HITECH Act.

For further details see links below.

http://www.hhs.gov/ocr/privacy/hipaa/news/cignetnews.html

http://www.foley.com/publications/pub_detail.aspx?pubid=7891