The U.S. Department of Health and Human Services’ Office for Civil Rights finalized its finding this month that a physicians’ group violated the Privacy Rule of the Health Insurance Portability and Accountability Act of 1996 (HIPAA). The agency has imposed a monetary penalty of $4.3 million for the violations, representing the first monetary penalty issued by the agency for violations of the HIPAA Privacy Rule. The increased penalty amounts were imposed under Section 13410(d) of the Health Information Technology for Economic and Clinical Health (HITECH) Act, which took effect in October 2009 and was intended to supplement and help enforce HIPAA.
