Live Breaking News & Updates on Enforcement discretion regarding

Stay updated with breaking news from Enforcement discretion regarding. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.

Healthcare Law Update: February 2021 | Holland & Knight LLP


HIPAA
Shannon B. Hartsfield
To date, there has been little consistency in how Health Insurance Portability and Accountability Act (HIPAA) requirements are enforced by the U.S. Department of Health and Human Services (HHS), or the amount of settlements or penalties. In
Univ. of Texas M.D. Anderson Cancer Ctr. v. U.S. Dept. of Health and Human Servs. No. 19-60226, 2021 WL 127819 (5th Cir. Jan. 14, 2021), the court vacated significant penalties against M.D. Anderson Cancer Center (M.D. Anderson) in a manner that could lead to changes to HIPAA enforcement in the future. The court found that HHS' decision to fine M.D. Anderson $4,348,000 "was arbitrary, capricious, and contrary to law."

Illinois , United-states , Cook-county , Netherlands , Texas , Washington , Holland , American , Asif-sayeed , Sakinahn-jones , Nathana-adams , Charlesa-weiss

Appeals Court Vacates HIPAA Penalty Imposed Against M.D. Anderson | Foley & Lardner LLP


To embed, copy and paste the code into your website or blog:
On January 14, 2021, the U.S. Court of Appeals for the Fifth Circuit vacated the civil monetary penalty (CMP) imposed by the Department of Health and Human Services (HHS)  against the University of Texas M.D. Anderson Cancer Center (M.D. Anderson) in 2017. The court stated that HHS “offered no lawful basis for its civil monetary penalties against M.D. Anderson” and HHS’ “decision was arbitrary, capricious, and contrary to law.”
History of the Case
Between 2012 and 2013, M.D. Anderson notified HHS of three separate HIPAA breaches, all involving lost or stolen mobile devices, affecting the electronic protected health information (ePHI) of approximately 35k patients. After conducting an investigation, HHS imposed a civil monetary penalty (CMP) of $4,348,000 on M.D. Anderson.

Texas , United-states , Health-information-technology-for-economic , Court-decision-to , Human-services , Us-court , Appellate-division , Department-of-health , Foley-lardner , Clinical-health , Fifth-circuit

Fifth Circuit Vacates HIPAA Penalty Against MD Anderson


Friday, January 29, 2021
On January 14, 2021, the U.S. Court of Appeals for the Fifth Circuit vacated the civil monetary penalty (CMP) imposed by the Department of Health and Human Services (HHS)  against the University of Texas M.D. Anderson Cancer Center (M.D. Anderson) in 2017. The court stated that HHS “offered no lawful basis for its civil monetary penalties against M.D. Anderson” and HHS’ “decision was arbitrary, capricious, and contrary to law.”
History of the Case
Between 2012 and 2013, M.D. Anderson notified HHS of three separate HIPAA breaches, all involving lost or stolen mobile devices, affecting the electronic protected health information (ePHI) of approximately 35k patients. After conducting an investigation, HHS imposed a civil monetary penalty (CMP) of $4,348,000 on M.D. Anderson.

Texas , United-states , Health-information-technology-for-economic , Court-decision-to , Appellate-division , Human-services , Department-of-health , Us-court , Clinical-health , Fifth-circuit , Cancer-center

Fifth Circuit Vacates $4.3M HIPAA Penalty


Monday, January 25, 2021
With a notably sharply worded opinion, the Fifth Circuit recently vacated over $4.3 million in penalties levied against the University of Texas M.D. Anderson Cancer Center (M.D. Anderson) by the Department of Health and Human Services (HHS) for a series of alleged HIPAA violations.
The case, 
University of Texas M.D. Anderson Cancer Center vs. U.S. Department of Health and Human Services, stems from three separate incidents that occurred between 2012 and 2013. In two instances, M.D. Anderson workforce members lost unencrypted protected health information (PHI), while the third incident involved the theft of a faculty member’s laptop also containing unencrypted PHI. After investigating these occurrences, HHS fined M.D. Anderson a total of $4,348,000, which M.D. Anderson contested through the agency’s administrative review process. On review, both the administrative law judge (ALJ) and the Departmental Appeals Board upheld the penalties.

Texas , United-states , Department-of-health , Human-services , S-department-of-health , Fifth-circuit , Cancer-center , Departmental-appeals-board , Disclosure-rule , Enforcement-discretion-regarding , Monetary-penalties

Appeals Court Vacates $4.3 Million HIPAA Penalty


Get Permission
In a ruling that could have a profound impact on HIPAA enforcement, a U.S. Court of Appeals has vacated a $4.3 million HIPAA civil monetary penalty levied by federal regulators against the University of Texas MD Anderson Cancer Center in the wake of three breaches involving unencrypted mobile devices. The court called the penalty “arbitrary, capricious and contrary to law.”
In its ruling, the 5th Circuit U.S. Court of Appeals in Louisiana was critical of the Department of Health and Human Services Office for Civil Rights’ interpretation of HIPAA requirements and how it sets civil monetary penalties.

Louisiana , United-states , Texas , Marianne-kolbasuk-mcgee-healthinfosec , Adam-greene , Kirk-nahra , David-holtzman , Davis-wright-tremaine , Paul-hales , University-of-texas-md-anderson-cancer-center , Circuit-us-court , Information-security-media-group