Triple-S Management Corporation, formerly known as American Health Medicare, has agreed to settle potential HIPAA violations with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR), according to an HHS press release. Triple-S, an insurance company based in Puerto Rico, suffered a breach involving unsecured protected health information (PHI). Upon investigation, OCR found “widespread non-compliance,” including failure to implement the appropriate safeguards to protect beneficiaries’ PHI; impermissible disclosure of PHI to a third-party vendor, and failure to implement sufficient security measures. The settlement requires Triple-S to establish a comprehensive compliance program, which the company has now begun to implement.
Full Story