First Civil Money Penalty Issued by HHS Due To Violations of HIPAA Privacy Rule
The U.S. Department of Health and Human Services has imposed a $4.3 million civil money penalty on Cignet Health of Prince George's County upon finding that they violated the rights of 41 patients by denying them access to their medical records.
HIPAA requires that a covered entity provide patients with a copy of their medical records when requested by a patient.