Seven years later, #HHSOCR settles #HIPAA enforcement action against #BannerHealth for $1.25 million and #CorrectiveActionPlan:
https://www.databreaches.net/hhs-ocr-settles-hipaa-investigation-with-banner-health-following-2016-hacking-incident/

If Banner settled the class action lawsuit against them for $6 million in 2019, why did it take until 2023 to settle HHS's investigation and action?

#HHS #OCR #Enforcement #HIPAA

@SchizoDuckie Heard from #HHSOCR's #FOIA folks. In response to my #FOIA request of a few years ago for reports mentioning "GitHub," they have more than 3000 pages. More than 75% cannot be given to me as they are exempt as provided by a commercial entity voluntarily, etc. So now they're sending me pages in batches of a few hundred, most of which will have nothing readable. 😜

"No need to hack when it's leaking:" the "Here's how you get a HIPAA complaint" edition: https://www.databreaches.net/no-need-to-hack-when-its-leaking-the-heres-how-you-get-a-hipaa-complaint-edition/

#HIPAA #SecurityRule #ResponsibleDisclosure #DataLeak #IncidentResponse #HHSOCR

@SchizoDuckie