
Legal Updates
7 min read
HIPAA Fines Hit Professional Services Firms
OCR's $175K settlement with BST & Co. CPAs shows business associates — including law firms handling PHI — face the same Security Rule risk-analysis duties as providers.
Read
3 articles with this tag

OCR's $175K settlement with BST & Co. CPAs shows business associates — including law firms handling PHI — face the same Security Rule risk-analysis duties as providers.

OCR doubled penalties, completed 50+ Right of Access actions, and launched Part 2 enforcement. What law firms need to know.

HHS OCR’s Concentra settlement highlights HIPAA’s 30-day access deadline, fee limits, and what patients can do when providers delay medical records.