$300K SettlemenT for Improper PHI Disposal

A press release from HHS (US Department of Health and Human Services) summarizes the final settlement between the OCR (Office for Civil Rights) and a private New England dermatology practice for numerous HIPAA (Health Insurance Portability and Accountability Act) violations. At issue was the improper disposal of empty specimen containers, which were disposed of in a parking lot garbage bin. ​

​Regardless of practice type, every office needs a HIPAA Compliance Manual specifically tailored to its data collection practices and workflow. Standard operating procedures (SOPs) for the proper handling of PHI should be a part of the Manual, along with employee HIPAA training records.

​Links for more information:
Frequently Asked Questions About the Disposal of Protected Health Information (hhs.gov)
HIPAA for Professionals | HHS.gov
U.S. Department of Health & Human Services - Office for Civil Rights (hhs.gov)