Last week, the Department of Health and Human Services’ Office for Civil Rights levied the largest fine ever against a provider organization for violations of the Health Insurance Portability and Accountability Act, or HIPAA.
The penalty totaled $5.55 million against Advocate Health Care. Monetary fines aren’t the only expenses faced by healthcare organizations, because they also enter into agreements to implement corrective action plans, taking a series of agreed-to steps to ensure that security and privacy problems are not repeated.
Here’s a list of the top 12 fines levied by OCR and the violations that precipitated the actions.
