MGH to Pay $1M to Settle 'Potential' HIPAA Violation
Massachusetts General Hospital has agreed to pay $1 million to settle allegations it violated patient privacy laws when a hospital employee lost protected patient medical information on a subway in March, 2009, federal and hospital officials announced Thursday.
The loss was said to be a "potential violation" of the Health Insurance Portability and Accountability Act of 1996, according to the Department of Health and Human Services.
Mass General signed a "resolution agreement" that requires it to develop and implement a comprehensive set of policies and procedures to safeguard patient privacy.
In a statement, MGH privacy officer Deborah Adair said the hospital will issue new or revised policies and procedures with respect to physical removal and transport of protected health information from hospital premises, laptop encryption, and USB drive encryption.
"After these policies and procedures are issued, we will be providing mandatory training on them," and all members of the workforce will have to complete that training, she said.
Georgina Verdugo, director of the federal Office for Civil Rights (OCR), said "We hope the health care industry will take a close look at this agreement and recognize that OCR is serious about HIPAA enforcement. It is a covered entity's responsibility to protect its patients' health information."
According to an HHS statement, the incident involved protected health information for 192 patients treated by the hospital's Infectious Disease Associates outpatient practice, and included patients with HIV/AIDS. An investigation ensued after a patient whose records were lost on March 9 filed a complaint. Billing encounter forms containing the name, date of birth, medical record number, health insurer and policy number, diagnosis, and names of providers for 66 of those patients.
- 'Mega Boards' Could be Rural Healthcare Disruptor
- 1 in 5 Eligible Hospitals Penalized for HACs
- HL20: Rebecca Katz—Cooking Up Sustainable Nourishment
- Meaningful Use Payment Adjustments Begin
- HL20: Peter Semczuk, DDS, MPH—Taking on the Big Challenges
- PA hospital to pay $662,000 to settle Medicare fraud case
- Supreme Court to hear Obamacare subsidy challenge in March
- Dr. Oz gets fact-checked and the results aren't pretty
- How the high cost of medical care is affecting Americans
- HL20: Lee Aase—Who's Behind @MayoClinic