The HHS’s First HITECH Breach Enforcement Action For $1.5 MIllion Sends a Clear Message

The HHS announced it first enforcement action resulting from the HITECH Breach Notification Rule on March 13, 2012. Blue Cross Blue Shield of Tennessee (BCBST) has agreed to pay $1.5 million to settle potential violations. The investigation began after BCBST submitted a notice to the HHS following the theft of 57 unencrypted hard drives from a leased facility in Tennessee.


The investigation found that the appropriate administrative safeguards, as well as appropriate physical safeguards were not taken to adequately secure  (more…)

Continue Reading
  • 1
  • 2
Close Menu