iHealthBeat reports Affinity Health Plan will pay the Department of Health and Human Services (HHS) approximately $1.2 million as a result of a data breach. Affinity filed the breach report with HHS Office for Civil Rights (OCR) back in April, the report states, after it “was informed by CBS Evening News that the network had purchased a photocopier previously leased by Affinity as part of an investigatory report and that the copier still contained confidential medical data on its hard drive.” The OCR found Affinity violated HIPAA by failing “to incorporate the electronic protected information stored on the photocopier hard drives in its analysis of risks and vulnerabilities as required,” the report states.
Full Story