Skip to main content
 HHS.gov
 Search
 U.S. Department of Health & Human Services
  Search Close
 A-Z Index
 About HHS
Programs & Services
Grants & Contracts
Laws & Regulations
 Home > About > News > Small Health Care Provider Fails to Implement Multiple HIPAA Security Rule Requirements
 Text Resize  
                                A
                                A
                                A
                            Print
                            Share
 Search News Releases
View 2016 - 1991 archive
 FOR IMMEDIATE RELEASEJuly 23, 2020Contact: HHS Press Office202-690-6343[email protected]Small Health Care Provider Fails to Implement Multiple HIPAA Security Rule RequirementsMetropolitan Community Health Services (Metro), doing business as Agape Health Services, has agreed to pay $25,000 to the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) and to adopt a corrective action plan to settle potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Security Rule. Metro is a Federally Qualified Health Center that provides a variety of discounted medical services to the underserved population in rural North Carolina and these facts were taken into account in reaching this agreement.
On June 9, 2011, Metro filed a breach report regarding the impermissible disclosure of protected health information to an unknown email account. The breach affected 1,263 patients. OCR's investigation revealed longstanding, systemic noncompliance with the HIPAA Security Rule. Specifically, Metro failed to conduct any risk analyses, failed to implement any HIPAA Security Rule policies and procedures, and neglected to provide workforce members with security awareness training until 2016.
"Health care providers owe it to their patients to comply with the HIPAA Rules. When informed of potential HIPAA violations, providers owe it to their patients to quickly address problem areas to safeguard individuals' health information," said Roger Severino, OCR Director.
In addition to the monetary settlement, Metro will undertake a corrective action plan that includes two years of monitoring. The resolution agreement and corrective action plan may be found at: https://www.hhs.gov/sites/default/files/metro-signed-agreement.pdf*.
* People using assistive technology may not be able to fully access information in this file. For assistance, contact the HHS Office for Civil Rights at (800) 368-1019, TDD toll-free: (800) 537-7697, or by emailing [email protected].###Note: All HHS press releases, fact sheets and other news materials are available at https://www.hhs.gov/news.Like HHS on Facebook, follow HHS on Twitter @HHSgov, and sign up for HHS Email Updates.Last revised: July 23, 2020 Sign Up for News Release UpdatesEnter your email:
Email Subscribe to RSSReceive latest updates Related News ReleasesOCR Settles Thirteenth Investigation in HIPAA Right of Access Initiative
  OCR Issues Guidance on HIPAA, Health Information Exchanges, and Disclosures of Protected Health Information for Public Health Purposes
  OCR Issues Audit Report on Health Care Industry Compliance with the HIPAA Rules
 Public Affairs Contacts
HHS Media InformationASPA Press ContactsHHS Agency Press Contacts
**View all**
 Connect With Us
 Sign Up for Email Updates To sign up for updates or to access your subscriber preferences, please enter your contact information below. Email
 HHS Headquarters U.S. Department of Health & Human Services
						200 Independence Avenue, S.W.
						Washington, D.C. 20201
						Toll Free Call Center: 1-877-696-6775​
 Contact HHS
                        Careers
                        HHS FAQs
                        Nondiscrimination Notice
 HHS Archive
                        Accessibility
                        Privacy Policy
                        Viewers & Players
 Budget/Performance
                        Guidance Portal 
                        Inspector General
                        EEO/No Fear Act
 FOIA
                        The White House
                        USA.gov


Back to *T*op