Texas Dentists for Medicaid Reform

NEW PHONE NUMBER
For more information call (512) 487-7584

  • Home
  • Issues
  • * Medicaid Difficulty Alert *
    • About the Medicaid Difficulty Alert
    • Alert Form
  • Articles
    • TDMR articles
    • Medicaid Media
    • Compliance Articles
  • Archive
    • The Facts About the Medicaid Orthodontic Scandal 2007 to 2012
    • Antoine Dental Case
    • HHSC-OIG Archive 2012 to 2014
      • TMHP
      • Harlingen Family Dentistry Case
        • Further HFD articles
      • OIG Never Returns Funds
      • Webinar March 19 2012
      • 2008 TMHP Audit by OIG
      • 2012 TMHP Audit by OIG
      • OIG Legislative Testimony
        • OIG Testimony March 19 2013
        • OIG Testimony February 13 2013
        • OIG Testimony February 4 2013
        • OIG Testimony January 30 2013
      • Jack Stick Arrest for DWI
    • Due Process Archive
      • Survey Results
      • Committees
        • Hearing Videos
      • TDMR Submission
      • HB 1536/SB 785
        • House Committee on Human Services
        • Written Testimony
        • Attorney Testimony Videos
        • Dental Provider Testimony Videos
      • SB 1803
        • Overview
        • Bill Moves to House
        • Public Testimony Videos
        • Passes House Committee
        • Bill Changed Before House Vote
        • SB 1803 Has Passed the House!
      • Other Proposed Bills
      • Due Process Legal Articles
      • Legislative Media
      • Media Archive
  • About
    • Dr. Juan D. Villarreal
    • Dr. Paul Dunn
    • Gregory Ewing
  • Contact
You are here: Home / Media / $750,000 HIPAA settlement emphasizes the importance of risk analysis and device and media control policies

$750,000 HIPAA settlement emphasizes the importance of risk analysis and device and media control policies

September 2, 2015 By TDMR Leave a Comment

Cancer Care Group, P.C. agreed to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules with the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR). Cancer Care paid $750,000 and will adopt a robust corrective action plan to correct deficiencies in its HIPAA compliance program. Cancer Care Group is a radiation oncology private physician practice, with 13 radiation oncologists serving hospitals and clinics throughout Indiana.

On August 29, 2012, OCR received notification from Cancer Care regarding a breach of unsecured electronic protected health information (ePHI) after a laptop bag was stolen from an employee’s car. The bag contained the employee’s computer and unencrypted backup media, which contained the names, addresses, dates of birth, Social Security numbers, insurance information and clinical information of approximately 55,000 current and former Cancer Care patients.

OCR’s subsequent investigation found that, prior to the breach, Cancer Care was in widespread non-compliance with the HIPAA Security Rule. It had not conducted an enterprise-wide risk analysis when the breach occurred in July 2012. Further, Cancer Care did not have in place a written policy specific to the removal of hardware and electronic media containing ePHI into and out of its facilities, even though this was common practice within the organization. OCR found that these two issues, in particular, contributed to the breach, as an enterprise-wide risk analysis could have identified the removal of unencrypted backup media as an area of significant risk to Cancer Care’s ePHI, and a comprehensive device and media control policy could have provided employees with direction in regard to their responsibilities when removing devices containing ePHI from the facility.

“Organizations must complete a comprehensive risk analysis and establish strong policies and procedures to protect patients’ health information,” said OCR Director Jocelyn Samuels. “Further, proper encryption of mobile devices and electronic media reduces the likelihood of a breach of protected health information.”

Cancer Care has taken corrective action with regard to the specific requirements of the Privacy and Security Rules that are at the core of this enforcement action, as well as actions to come into compliance with the other provisions of the HIPAA Rules. The Resolution Agreement and Corrective Action Plan (CAP) can be found on the OCR website at: http://www.hhs.gov/ocr/privacy/hipaa/enforcement/examples/cancercare.html

HHS offers guidance on how your organization can conduct a HIPAA Risk Analysis:http://www.healthit.gov/providers-professionals/security-risk-assessment

To learn more about non-discrimination and health information privacy laws, your civil rights, and privacy rights in health care and human service settings, and to find information on filing a complaint, visit us athttp://www.hhs.gov/ocr/office.

Source: $750,000 HIPAA settlement emphasizes the importance of risk analysis and device and media control policies

Share this:

  • Click to share on Facebook (Opens in new window)
  • Click to share on Twitter (Opens in new window)
  • Click to share on LinkedIn (Opens in new window)
  • Click to print (Opens in new window)
  • More
  • Click to share on Reddit (Opens in new window)
  • Click to share on Pinterest (Opens in new window)
  • Click to share on Tumblr (Opens in new window)

Filed Under: Media Tagged With: healthcare compliance

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Search the TDMR Website

Most Viewed Posts & Pages

  • UPDATE: Dentists Clarified as Healthcare Workers to Receive COVID-19 Vaccines
    UPDATE: Dentists Clarified as Healthcare Workers to Receive COVID-19 Vaccines
  • Judge Orders Dr. Richard Malouf to Pay Texas Back $12 Million for Medicaid Fraud
    Judge Orders Dr. Richard Malouf to Pay Texas Back $12 Million for Medicaid Fraud
  • Dental firm managers accused of health care fraud
    Dental firm managers accused of health care fraud
  • 15 years in prison for $154 million Medicare fraudster
    15 years in prison for $154 million Medicare fraudster
  • MB2 Dental Solutions Issues Statement About $8.45 Million Settlement
    MB2 Dental Solutions Issues Statement About $8.45 Million Settlement

Receive Updates on TDMR Activities

Recent Comments by Readers

  • mattthew on Texas Lawyers Behind Samson Dental Partners and ImmediaDent $5.1 million settlement in Indiana
  • Spence on Woman claims dentist pulled wrong tooth
  • Spence on Woman claims dentist pulled wrong tooth
  • Nilar Vargas on Dentists cleared to administer COVID-19 vaccine in California
  • TDMR on UPDATE: Dentists Clarified as Healthcare Workers to Receive COVID-19 Vaccines
  • Angela on UPDATE: Dentists Clarified as Healthcare Workers to Receive COVID-19 Vaccines

Recent Media of Interest

Dental firm managers accused of health care fraud

February 26, 2021

Spine surgeon gets 10-year prison sentence for healthcare fraud

February 26, 2021

Fort Worth Doctor Sentenced to 10 Years in Health Care Fraud Conspiracy

February 26, 2021

U.S. Attorney Scott Brady and Pennsylvania Attorney General Josh Shapiro Announce Indictment in Nursing Home Investigation

February 25, 2021

AG Healey reaches settlement with Brighton dental office for failing to accept MassHealth patients

February 24, 2021

Feds: Father, son sentenced in $27M Obamacare scheme

February 24, 2021

Mhiramarc Exec Sentenced in $28 Million Hospice Fraud Scheme

February 22, 2021

HHS Acting Secretary Norris Cochran Declares Public Health Emergency for State of Texas Due to Winter Storms

February 19, 2021

President Biden Announces Key Members of his Health and Human Service, Education, and Veterans Affairs Teams

February 19, 2021

Feds sweeten Medicaid deal

February 19, 2021

Senior Care Company Agrees to Pay $714,996 to Resolve False Claims Act Allegations

February 18, 2021

Three companies receive Medicaid managed care dental contracts

February 17, 2021

Medical equipment firm and its owner agree to pay $20.3M in fraud scheme

February 17, 2021

Biden’s Medicare Pick Would Be 1st Black Woman to Hold Post

February 17, 2021

15 years in prison for $154 million Medicare fraudster

February 15, 2021

Former top aides say Attorney General Ken Paxton received assistance with home remodel, job for alleged girlfriend in return for helping political donor

February 12, 2021

More Articles...

Copyright © 2021 · All Rights Reserved. Texas Dentists for Medicaid Reform · Privacy Policy