With the enactment of HITECH in 2009, State Attorneys General became a player in the HIPAA enforcement game. Section 13410(e) of HITECH permits State Attorneys General to obtain damages on behalf of state residents or to enjoin further violations of the HIPAA Privacy and Security Rules. In 2011, the Office for Civil Rights (OCR) developed… Continue Reading