Blog: OCR

 

Our Blogs

OCR Settlement Lessons – Failing to Perform an Electronic Access Risk Analysis Before an Unauthorized Access Occurs

Posted on May 3, 2017 by
Blog

Failure to conduct a risk assessment before a hacking incident occurred resulted in a $400,000 settlement between the Office of Civil Rights (OCR) and a Federally Qualified Health Clinic (FQHC).  The FQHC filed a breach report upon learning its employee emails had been hacked and the hacker had access to electronic health information of over […]