HHS settles with L.A. Health care over Hippa violations

I’d love to see more of these. I think that if the health care industry as a whole was targeted by the organization that targeted these guys, maybe their security would be more up to par. Then again, maybe not?

“Breaches of protected health information by a HIPAA-regulated entity often reveal systemic, noncompliance with the HIPAA Rules,” said OCR Director Melanie Fontes Rainer.  “HIPAA-regulated entities need to be proactive in ensuring their compliance with the HIPAA Rules, and not wait for OCR to reveal long-standing HIPAA deficiencies.  Entities such as LA Care must protect the health information of its insureds while providing health care for the most vulnerable residents of Los Angeles County through its coverage, which includes Medicaid, Medicare, and Affordable Care Act health plans.”

It shouldn’t stop here with Los Angeles. All of these health care industries Databreaches has posted about whether we have posted about it or not should be targeted by this OCR group to see if there are any compliance issues.

Not all breaches could be targeted by compliance issues, but we have no way to know.

Full article by databreaches: HHS Office for Civil Rights Settles with L.A. Care Health Plan Over Potential HIPAA Security Rule Violations if you’re interested.