Alaska's Medicaid to pay $1.7 million for HIPAA violations; second largest settlement to date
HIM-HIPAA Insider, July 9, 2012
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
Alaska’s Medicaid program has agreed to pay OCR $1.7 million over potential HIPAA Security Rule violations, OCR announced in a June 26 press release.
The settlement marks the second largest to date for HIPAA violations, behind CVS Caremark’s $2.25 agreement in 2009. It also marks OCR’s first enforcement action against a state agency.
OCR reported that Alaska’s Department of Health and Social Services (DHSS), the state Medicaid agency, did not have adequate policies and procedures in place to safeguard PHI when a USB hard drive was stolen from an employee’s vehicle.
OCR also found in its investigation that Alaska had not:
- Completed a risk analysis
- Implemented sufficient risk management measures
- Completed security training for its workforce members
- Implemented device and media controls
- Addressed device and media encryption as required by the HIPAA Security Rule
Alaska DHSS has also agreed to take corrective action to properly safeguard the electronic protected health information (ePHI) of their Medicaid beneficiaries.
Editor’s note: Read more on the HIPAA Update blog.
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
Related Products
Most Popular
- Articles
-
- Jury sides with blood lab technician in New Jersey whistleblower case
- Note from Hugh
- Questions surround when time starts for proposed inpatient presumption
- Q/A: Should we use modifier -Q0 to override edits for ICDs?
- Five tips for an effective hospital patient safety program
- Overnight physicians in ICU show little effect on outcomes
- QAPI is coming: Is your facility preparing for its arrival?
- CMS releases updated MDS 3.0 RAI User's Manual
- Tip: Review codes that are now packaged
- Maine comes in first in hospital safety
- E-mailed
-
- Questions surround when time starts for proposed inpatient presumption
- Jury sides with blood lab technician in New Jersey whistleblower case
- Q/A: Should we use modifier -Q0 to override edits for ICDs?
- Overnight physicians in ICU show little effect on outcomes
- Tip: Review codes that are now packaged
- QAPI is coming: Is your facility preparing for its arrival?
- ACDIS/AHIMA brief provides guidance on query best practices
- Maine comes in first in hospital safety
- Surgical residents disapprove of duty hour restrictions
- Tip: Nursing documentation requirements for observation services
- Searched
