Government Health IT reports healthcare entities and business associates should prepare for new audits and monetary enforcement, says Leon Rodriguez of the Office for Civil Rights at the Department of Health and Human Services. He adds, however, healthcare entities that respond responsibly to data breaches most likely won’t face monetary punishment. In fiscal year 2012, the agency collected nearly $4 million—a record amount for the agency—though that number represents only about 10 cases. “One of the first things we look at is what did the entity do to analyze the root cause of the breach. (And) what did it do to remedy the root causes,” he says.
Full Story