Header graphic for print
HealtHITech Law HIPAA, HITECH and Beyond

Category Archives: Business Associate

Subscribe to Business Associate RSS Feed

HIPAA Breach Reports Trigger Investigations, Significant Settlements

Posted in Breach, Business Associate, Enforcement

The Office for Civil Rights (OCR) has announced two more significant HIPAA settlements involving covered entities. Both settlements were the result of investigations triggered by breach reports involving laptop thefts. And as is often the case, the investigations uncovered numerous HIPAA compliance issues above and beyond those which led to the breach. North Memorial Health Care… Continue Reading


Posted in Business Associate, Enforcement

In 2009, HITECH gave State Attorneys General the authority to bring civil actions on behalf of their state residents for violations of HIPAA.  The HITECH Act permits State Attorneys General to sue in federal district court to obtain monetary damages on behalf of state residents and/or to enjoin further violations of HIPAA. Although trained by… Continue Reading

HIPAA Business Associate Becomes Target of State AG Enforcement

Posted in Business Associate, Enforcement

A recent complaint filed by the Minnesota State Attorney General against a HIPAA business associate seeks to recover statutory damages for multiple alleged violations of the HIPAA Security Rule.  Following last year’s HHS OCR enforcement targeting HIPAA covered entities, this latest HIPAA enforcement should place all business associates on notice that enforcement authorities have them… Continue Reading