HealthITSecurity reports that cancer care services provider 21st Century Oncology has agreed to a $2.3 million settlement with the U.S. Department of Health and Human Services Office for Civil Rights after a 2015 data breach. The OCR found that the organization compromised the personal health information of 2,213,597 patients and "failed to conduct an accurate and thorough assessment of potential risks and vulnerabilities to the confidentiality, integrity, and availability of the ePHI." 21CO must comply with a corrective action plan, which includes appointing an individual who is knowledgable about HIPAA, completion of a risk management plan, revision of internal policies, establishing business associate agreements, and conducting internal monitoring of its information security, the report states.
Full Story