Lifespan Agrees to $1 Million Settlement for EHR Data Breach and HIPPA Violations

    On July 27, 2020, the Office for Civil Rights (OCR) under the U.S. Department of Health & Human Services (HSS) announced a settlement with Lifespan Health System Affiliated Covered Entity (Lifespan), in which Lifespan agreed to pay $1,040,000 following an April 2017 breach concerning the theft of an unencrypted employee laptop.

    The theft resulted in a breach of 20,431 individuals’ electronic protected health information (ePHI), including “patients’ names, medical record numbers, demographic information, and medication information.”

    Read more at HSS

    Need a Data Privacy, Protection, and Security expert?

    If you are in need of an expert with experience in data privacy and data security disputes, we invite you to consider DisputeSoft.

    View all posts