A settlement has been reached between the U.S. Department of Health and Human Services Office for Civil Rights and Filefax for HIPAA Privacy Rule violations, despite the fact the company is no longer in business. A receiver designated to liquidate the assets of Filefax will pay $100,000 out of the receiver estate after it was discovered an individual left approximately 2,150 patient records at a shredding and recycling facility. Between Jan. 28 and Feb. 14, 2015, patients’ protected health information was either left within an unlocked truck in the Filefax parking lot or was in the possession of an unauthorized person at the facility. The receiver, on behalf of Filefax, agreed to properly store and dispose of any other records located at Filefax’s facility.
If you want to comment on this post, you need to login.