Illinois-based OSF Healthcare System and its affiliated covered entities have agreed to pay $552,250 as part of an agreement with the U.S. Department of Health and Human Services’ Office for Civil Rights (HHS OCR) to resolve potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security, and Breach Notification Rules. The resolution brings with it a list of compliance lessons for all covered health care entities.
OCR enforces the HIPAA Privacy, Security, and Breach Notification Rules, which set forth the requirements that covered entities – health plans, health care clearinghouses, health care providers, and their business associates – must follow to protect the privacy and security of personal health information (PHI).
