
HIPAA Fines Hit Professional Services Firms
OCR's $175K settlement with BST & Co. CPAs shows business associates — including law firms handling PHI — face the same Security Rule risk-analysis duties as providers.
7 articles with this tag

OCR's $175K settlement with BST & Co. CPAs shows business associates — including law firms handling PHI — face the same Security Rule risk-analysis duties as providers.

The Conduent data breach now affects 25M+ Americans — SSNs, medical records, and Medicaid data stolen across 30+ states.

OCR doubled penalties, completed 50+ Right of Access actions, and launched Part 2 enforcement. What law firms need to know.

The first HIPAA Security Rule update in 13 years mandates MFA, encryption, and annual audits. What law firms must prepare now.

OCR launched civil enforcement of substance use disorder record rules on Feb 16. Penalties now mirror HIPAA.

HIPAA gives providers 30 days, but expedited services deliver in 3-7. Here's every timeline attorneys need to know.

HHS OCR’s Concentra settlement highlights HIPAA’s 30-day access deadline, fee limits, and what patients can do when providers delay medical records.