[{"innerBlocks":[],"name":"core\/freeform","postId":150,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"The Department of Health and Human Services\u2019 Office for Civil Rights has announced that West Georgia Ambulance has agreed to settle agency allegations of longstanding HIPAA noncompliance.West Georgia Ambulance, which provides emergency and non-emergency medical services in Carroll County, will pay $65,000 to OCR and adopt a corrective action plan as part of a settlement for potential violations of the HIPAA Security Rule.According to OCR, the agency\u2019s investigation was initiated after the ambulance company filed a breach report in 2013 concerning the loss of an unencrypted laptop containing protected health information for 500 people. The breach occurred when the unencrypted laptop fell off the back bumper of an ambulance\u2014the computer was not recovered.

\u201cOCR\u2019s investigation uncovered longstanding noncompliance with the HIPAA Rules, including failures to conduct a risk analysis, provide a security awareness and training program, and implement HIPAA Security Rule policies and procedures,\u201d states the agency\u2019s announcement.In addition, the agency notes that \u201cdespite OCR\u2019s investigation and technical assistance, West Georgia did not take meaningful steps to address their systemic failures.\u201d\u201cThe last thing patients being wheeled into the back of an ambulance should have to worry about is the privacy and security of their medical information,\u201d said OCR Director Roger Severino in a written statement. \u201cAll providers, large and small, need to take their HIPAA obligations seriously.\u201dAs part of its settlement with OCR, West Georgia Ambulance has agreed to undertake a corrective action plan that includes two years of monitoring. The OCR-West Georgia resolution agreement and corrective action plan can be found here<\/a>.\u201cThis agreement is not an admission of liability by the covered entity,\u201d states the document. \u201cThis agreement is not a concession by HHS that the covered entity is not in violation of the HIPAA Rules and that the covered entity is not liable for civil money penalties.\u201d","saveContent":"The Department of Health and Human Services\u2019 Office for Civil Rights has announced that West Georgia Ambulance has agreed to settle agency allegations of longstanding HIPAA noncompliance.West Georgia Ambulance, which provides emergency and non-emergency medical services in Carroll County, will pay $65,000 to OCR and adopt a corrective action plan as part of a settlement for potential violations of the HIPAA Security Rule.According to OCR, the agency\u2019s investigation was initiated after the ambulance company filed a breach report in 2013 concerning the loss of an unencrypted laptop containing protected health information for 500 people. The breach occurred when the unencrypted laptop fell off the back bumper of an ambulance\u2014the computer was not recovered.

OCR reaches HIPAA settlement with ambulance company

More for you