OCR fines Denver pharmacy $125,000 for HIPAA breach
HIM-HIPAA Insider, May 4, 2015
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
The HHS Office for Civil Rights (OCR) entered into a $125,000 resolution agreement March 15 with Cornell Prescription Pharmacy (CCP) in Denver for HIPAA violations.
OCR received a media report January 11, 2012, indicating that CCP disposed of PHI in a publicly accessible dumpster. OCR began investigating CCP January 13, 2012, and notified the covered entity of the investigation February 27, 2012. The resolution agreement states that CCP failed to do the following:
- Reasonably safeguard PHI
- Implement written policies and procedures for compliance with the HIPAA Privacy Rule
- Provide and document HIPAA Privacy Rule training for workforce members since the compliance date of the rule
In addition to agreeing to the civil monetary penalty, CCP also agreed to do the following as part of the resolution agreement with OCR:
- Develop, maintain, and revise written policies and procedures to comply with federal privacy standards
- Provide copies of policies and procedures to OCR for review and approval
- Adopt and implement policies and procedures within 30 days of OCR approval
- Distribute policies and procedures to workforce members within 30 days of OCR approval
- Require workforce members to sign policies and procedures indicating that they have read, understand, and will abide by them
- Assess, update, and revise policies and procedures annually
- Restrict workforce members from the use or disclosure of PHI if they have not signed the policies and procedures
- Train workforce members on the new policies and procedures within 30 days of implementation
- Notify HHS/OCR of any future reportable breaches within 30 days of conducting an internal investigation
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
Related Products
Most Popular
- Articles
-
- Don't forget the three checks in medication administration
- Five ways to safeguard your patients' valuables
- Note similarities and differences between HCPCS, CPT® codes
- The consequences of an incomplete medical record
- Q&A: Primary, principal, and secondary diagnoses
- Skills of effective case managers
- OB services: Coding inside and outside of the package
- Reimbursement for Facility and Professional Services in a Provider-Based Department by Gina M. Reese, Esq., RN
- Nursing responsibilities for managing pain
- Practice the six rights of medication administration
- E-mailed
-
- Plan of Care Supports Documentation of Homebound Status
- Q/A: Coding infusions to correct low potassium levels
- Note from the instructor: CMS clarifies billing guidelines on proper billing for drugs in a single-dose or single-use vial, including billing for discarded drugs
- Neurological checks for head injuries
- Modifiers and medical necessity
- HIPAA Q&A: Cameras in patient rooms
- Follow these tips to properly report bladder catheter codes
- Examine cardboard boxes stored on floor to avoid infection control, life safety citations
- Differentiate between types of wound debridement
- Consider two options for coding Rho(D) immune globulin given in pregnancy
- Searched