Lack of HIPAA Business Associate Agreement Proves Costly

The lack of a business associate agreement recently resulted in a $750,000 settlement for alleged HIPAA violations. According to a post on the Department of Health and Human Services website, Raleigh Orthopaedic Clinic  released x-ray films and other protected health information of 17,300 patients to an entity that promised to transfer the images to electronic media in exchange for harvesting the silver from the x-ray films.  This disclosure would have been permissible if a business associate agreement had been in… Read More >