The Office for Civil Rights in the U.S. Department of Health and Human Services this week announced that it has reached a settlement with Tampa, Florida-based BayCare Health System over several potential violations of the HIPAA Security Rule.

WHY IT MATTERS

The settlement, for $800,000, resolves an OCR investigation into alleged impermissible access to a patient's electronic protected health information, or ePHI, at BayCare.

OCR says it first received a complaint in October 2018, with someone who had received care at the health system alleging that she had subsequently been contacted by "an unknown individual who had photographs of her printed medical records [and] video of someone scrolling through her medical records on a computer screen."

The OCR investigation found the credentials

See Full Page