Published · Updated · United States
HIPAAHigh severityEnforcement action
HHS OCR fines Lehigh Valley Health Network $800000 over HIPAA violations
Lehigh Valley Health Network agreed to pay an $800,000 civil penalty to resolve alleged HIPAA privacy and security violations identified by the Office for Civil Rights.
1 source · $800K penalty
What happened
- Lehigh Valley Health Network, a Pennsylvania health system, faced a civil enforcement action by the U.S. Department of Health and Human Services Office for Civil Rights.
- The settlement resolves alleged violations of the HIPAA Privacy, Security, and Breach Notification Rules.
Why it matters
Other health providers should review their HIPAA risk analyses and security safeguards now, as OCR continues to pursue civil penalties for similar gaps.
Business impact
The penalty underscores the financial risk of non‑compliance and may prompt providers to accelerate remediation projects and staff training.
Drafted automatically from the sources below. How we write summaries
Does this summary seem wrong?What to check
conductHigh priority
a comprehensive HIPAA risk analysis covering privacy, security and breach notification controls.
updateHigh priority
all documented policies and procedures to reflect current HIPAA requirements.
trainMedium priority
workforce on HIPAA privacy and security obligations and incident reporting.
Discussion
No comments yet. Start the discussion.