With Jennifer Breuer
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently issued fines against two violators of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule – one in the form of a civil monetary penalty and one in the form of a settlement amount.