HHS Inks First Deal For HIPAA Breach Of Under 500 Patients

Law360, New York (January 2, 2013, 7:15 PM EST) -- An Idaho hospice has become the first company to settle misconduct allegations involving disclosure of personal information of fewer than 500 patients, the U.S. Health and Human Services Department said Tuesday, in a development that suggests even small privacy breaches won’t evade regulatory enforcement.

Hospice of North Idaho, which is paying $50,000 to end a federal investigation, said it reported to authorities the theft of a laptop computer from an employee’s vehicle as required under federal law. In addition, the 100-employee hospice says it offered credit...
To view the full article, register now.