On February 6, 2024, the HHS Office for Civil Rights (“OCR”) announced a settlement with Montefiore Medical Center (“MMC”) for alleged HIPAA Security Rule violations and MMC agreed to pay $4.75 million and enter into a two-year corrective action plan (“CAP”) with OCR. MMC admitted no wrongdoing.
What You Need to Know:
Employees who act with improper motives will not absolve employers from HIPAA responsibility.
HIPAA Security Rule and Privacy Rule compliance remains imperative for HIPAA-covered entities.
Read more at News.law
