Source: https://thehealthcareblog.com/blog/2011/02/23/ocr-imposes-4-3m-penalty-for-violation-of-hipaahitech-privacy-rule/
Timestamp: 2019-10-16 17:44:17
Document Index: 40737653

Matched Legal Cases: ['§ 164', '§ 164', '§ 164', '§ 164', '§ 160', '§ 160', '§ 160', '§ 160', '§ 160', '§ 160']

OCR Imposes $4.3M Penalty for Violation of HIPAA/HITECH Privacy Rule – The Health Care Blog
1. Failure to Provide Access (45 C.F.R. § 164.524). Cignet failed to provide 41 individuals listed in Attachment A timely access to obtain a copy of the protected health information about them in the designated record sets (medical records) maintained by Cignet. These failures constitute violations of 45 C.F.R. § 164.524. Cignet’s failure to provide each individual with access constitutes a separate violation of 45 C.F.R. § 164.524, and each day that the violation continued (that is, from the date specified in column 5 of Attachment A until April 7,2010) counts as a separate violation of 45 C.F.R. § 164.524.
2. Failure to Cooperate with an Investigation (45 C.F.R. § I60.310(b)). Cignet failed to cooperate with OCR’s investigation of 27 complaints regarding Cignet’s noncompliance described in paragraph 1 above. These failures to cooperate with an investigation constitute violations of 45 C.F.R. § 160.310(b). Cignet’s failure to cooperate with OCR’s investigation of each complaint constitutes a separate violation of 45 C.F.R. § 160.310(b), and each day that the violation continued (that is, from the date specified in column 7 of Attachment A until April 7, 2010) counts as a separate violation of 45 C.F.R. § 160.310(b). Each violation of 45 C.F.R. § 160.310(b) was due to Cignet’s willful neglect of its obligation to comply with 45 C.F.R. § 160.310(b). Willful neglect means the conscious, intentional failure or reckless indifference to the obligation to comply with the administrative simplification provision violated. See 45 C.F.R. § 160.401.
Read the HHS Press Release and OCR Press Release. More details via the OCR’s Resolution Agreement page. For more background on Cignet Health check out David Harlow’s post at HealthBlawg, HIPAA CMP’s: What’s the point?
Tagged as: Bob Coffield, HIPAA violations, OCR, Penalties
Might take earplugs so I could sleep while the kids party and run up and down the halls, though..
Tweets that mention OCR Imposes $4.3M Penalty for Violation of HIPAA/HITECH Privacy Rule | The Health Care Blog -- Topsy.com
[…] This post was mentioned on Twitter by Hashem AbuBaker, Emily Peters. Emily Peters said: OCR Imposes $4.3M Penalty for Violation of HIPAA/HITECH Privacy Rule https://thehealthcareblog.com/?p=24847 > Very interesting […]
OCR Imposes $4.3M Penalty for Violation of HIPAA/HITECH Privacy Rule | Health & Fitness GOALS!