HIPAA settlement demonstrates importance of implementing safeguards for ePHI

The U.S. Department of Health and Human Services, Office for Civil Rights (OCR), has announced a Health Insurance Portability and Accountability Act of 1996 (HIPAA) settlement based on the impermissible disclosure of unsecured electronic protected health information (ePHI).  MAPFRE Life Insurance Company of Puerto Rico has agreed to settle potential noncompliance with the HIPAA Rules by paying $2.2 million and implementing a corrective action plan.


Content created by Office for Civil Rights (OCR)
Content last reviewed