Advanced Search

Home Health & Hospice Week

Industry Note:

$1.5 Million HIPAA Lesson: Secure Your Hard Drives

Published on Fri Apr 20, 2012

Learn a lesson from one health plan's HIPAA disaster. Blue Cross Blue Shield of Tennessee agreed to pay the Department of Health and Hu-man Services $1.5 million to settle potential HIPAA violations, according to an HHS release. This action followed BCBST's disclosure of the theft of 57 unencrypted computer hard drives from a leased facility in Tennessee. BCBST failed "to implement appropriate administrative safeguards to adequately protect information," HHS says. It should have been performing the required security evaluation in response to operational changes, according to the release. In addition, the investigation showed a "failure to implement appropriate physical safeguards by not having adequate facility access controls," it added. The HHS Office for Civil Rights, which enforces HIPAA, "expects health plans and health care providers to have in place a carefully designed, delivered, and monitored HIPAA compliance program," OCR Director Leon Rodriguez says. In addition to the fine and policy [...]
You’ve reached your limit of free articles. Already a subscriber? Log in.
Not a subscriber? Subscribe today to continue reading this article. Plus, you’ll get:
  • Simple explanations of current healthcare regulations and payer programs
  • Real-world reporting scenarios solved by our expert coders
  • Industry news, such as MAC and RAC activities, the OIG Work Plan, and CERT reports
  • Instant access to every article ever published in Revenue Cycle Insider
  • 6 annual AAPC-approved CEUs
  • The latest updates for CPT®, ICD-10-CM, HCPCS Level II, NCCI edits, modifiers, compliance, technology, practice management, and more

Other Articles in this issue of

Home Health & Hospice Week

View All