Health Law Update

Home | Health Law Update

<img class="alignright wp-image-3349 size-thumbnail" src="https://healthlawupdate.bakerhostetlerblogs.com/wp-content/uploads/sites/19/2015/10/health-iStock_000063719731_Full-103x150.jpg" alt="" width="103" height="150">

On the heels of the <a href="http://www.dataprivacymonitor.com/hipaahitech/ocr-continues-waving-its-hipaa-enforcement-flag-dont-forget-about-medical-devices/">Lahey Hospital and Medical Center resolution agreement</a>, OCR announced a <a href="http://www.hhs.gov/ocr/privacy/hipaa/enforcement/examples/TRIPLES/triple-s-ocr-resolution-agreement.pdf">resolution agreement with Triple-S Management Corporation</a> and its subsidiaries, Triple-S Salud Inc. and Triple-C Inc. (collectively “Triple-S”). As part of the announcement, Office for Civil Rights (OCR) Director Jocelyn Samuels flagged two specific areas for covered entities to focus their Health Insurance Portability and Accountability Act (HIPAA) compliance efforts: business associate agreements and minimum necessary use of protected health information (PHI). <a href="http://www.dataprivacymonitor.com/hipaahitech/another-day-another-ocr-resolution-agreement-numerous-repeated-breaches-lead-to-3-5-million-settlement/"><strong>Read more &gt;&gt;</strong></a>

Another Day, Another OCR Resolution Agreement – Numerous Repeated Breaches Lead to $3.5 Million Settlement