Health Information Management

CVS to pay $2.25 million settlement for potential privacy breaches

HIM-HIPAA Insider, February 23, 2009

HHS and the Federal Trade Commission (FTC) announced February 19 that CVS, the nation’s largest retail pharmacy chain, will pay the U.S. government $2.25 million and take corrective action as part of a settlement for potential privacy breaches affecting millions of patients.

The settlement ends an investigation by the OCR that began with media reports that CVS used unsecured and publicly accessible industrial trash containers to dispose of patient information outside selected stores, according to the press release.

CVS also settled potential violations of the FTC Act with the FTC, according to an HHS press release Wednesday, February 18.

Most Popular