In a settlement with the Department of Health and Human Services (DHHS) over potential HIPAA violations, Cancer Care Group has agreed to pay $750,000 and adopt a “robust corrective action plan to correct deficiencies in its HIPAA compliance program,” according to a DHHS press release. The settlement follows a breach three years ago after an unencrypted server backup and laptop were stolen from the car of an employee of the oncology practice. Meanwhile, the Association of American Physicians and Surgeons has filed an amicus brief with the U.S. Supreme Court, urging the court to dismiss the state of Vermont’s appeal of the Second Circuit’s decision to block “enforcement of Vermont's database requirement against Liberty Mutual Insurance Company” due to privacy concerns.
Full Story