---
title: HIPAA Enforcement is Growing Teeth
description: The Office of Civil Rights, Department of Health and Human Services recently announced fines against two health care providers for failure to properly implement and follow breach policies for ePHI.
image: https://blog.goosmannlaw.com/hubfs/Blog_Images/HIPPA.jpg
---

[![Goosman Lawfirm](https://blog.goosmannlaw.com/hs-fs/hubfs/Goosmannlaw%20October2017/images/Goosmann_Law_Firm_logo_4C-white.png?width=1250&name=Goosmann_Law_Firm_logo_4C-white.png "Goosman Lawfirm")](http://goosmannlaw.com/)

- [COVID-19 Toolbox](https://goosmannlaw.com/covid-19-resource-toolbox/)
- Our Team 
    - [Attorneys](https://goosmannlaw.com/attorneys/)
    - [Non-Attorney Staff](https://http://goosmannlaw.com/non-attorney-staff/)
- Practices & Industries 
    - [Practices](https://goosmannlaw.com/practices/) 
          - [Banking & Finance](https://goosmannlaw.com/banking-finance/)
          - [Bankruptcy, Restructuring & Workouts](https://goosmannlaw.com/bankruptcy-restructuring-workouts/)
          - [Business](https://goosmannlaw.com/business/)
          - [Divorce & Family Law](https://goosmannlaw.com/divorce-family-law/)
          - [Employment](https://goosmannlaw.com/employment-law/)
          - [Environmental, Health & Safety](https://goosmannlaw.com/health-safety/)
          - [Estate Planning](https://trustlawcounsel.com)
          - [Gestational Surrogacy & Adoption](https://goosmannlaw.com/gestational-surrogacy-adoption/)
          - [International Law](http://goosmannlaw.com/international-law/)
          - [Litigation / Trial Law](https://goosmannlaw.com/litigation-trial-law/)
          - [Local Counsel](https://http://goosmannlaw.com/local-counsel/)
          - [Mergers & Acquisitions](https://goosmannlaw.com/mergers-acquisitions/)
          - [Rapid Response](https://goosmannlaw.com/rapid-response/)
    - [Industries](https://goosmannlaw.com/industries/) 
          - [Agribusiness & Cooperatives](https://goosmannlaw.com/agribusiness-cooperatives/)
          - [Construction](https://goosmannlaw.com/construction/)
          - [Cyber Law and Telecommunications](https://goosmannlaw.com/cyber-law/)
          - [Education](https://goosmannlaw.com/education/)
          - [Health Care](https://goosmannlaw.com/health-care/)
          - [Manufacturing](https://goosmannlaw.com/manufacturing-law/)
          - [Multifamily Housing](https://goosmannlaw.com/multifamily-housing-law/)
          - [Non-Profit & Tax Exempt Organizations](https://goosmannlaw.com/non-profit-law/)
          - [Real Estate](https://goosmannlaw.com/real-estate/)
          - [Transportation](https://goosmannlaw.com/transportation/)
          - [Tribal](https://goosmannlaw.com/tribal/)
- Our Firm 
    - [Firm News](https://blog.goosmannlaw.com/firm-news)
    - Careers 
          - [Attorneys](https://goosmannlaw.com/careers/attorneys/)
          - [Administration](https://goosmannlaw.com/careers/administration/)
          - [Internships](https://goosmannlaw.com/careers/internships/)
    - [Client Testimonials and Results](https://goosmannlaw.com/our-firm/client-testimonials-and-results/)
    - [Culture, Diversity, and Community](https://http://goosmannlaw.com/our-firm/culture-diversity-and-community/)
    - [Women-Owned Business](https://goosmannlaw.com/our-firm/women-owned-business/)
    - [Associations & Memberships](https://goosmannlaw.com/associations-memberships/)
    - [Firm History](https://goosmannlaw.com/firm-history/)
- Blogs 
    - [CEO Law Review](https://blog.goosmannlaw.com/ceo-on-your-side)
    - [Construction Lawyer](https://blog.goosmannlaw.com/construction-lawyer-on-your-side)
    - [Cyber Lawyer](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side)
    - [Deal Maker](https://blog.goosmannlaw.com/deal-maker-on-your-side)
    - [Divorce Docket](https://blog.goosmannlaw.com/divorce-lawyer-on-your-side)
    - [Food for Thought](https://blog.goosmannlaw.com/agricultural-lawyer-on-your-side)
    - [HR Legal Insider](https://blog.goosmannlaw.com/human-resources-on-your-side)
    - [Law Doc](https://blog.goosmannlaw.com/health-lawyer-on-your-side)
    - [Paralegal Review](https://blog.goosmannlaw.com/paralegal-review/)
    - [Real Estate Lawyer](https://blog.goosmannlaw.com/real-estate-lawyer-on-your-side)
    - [Risky Business](https://blog.goosmannlaw.com/risk-manager-on-your-side)
    - [The Banker’s Suit](https://blog.goosmannlaw.com/banking-lawyer-on-you-side)
    - [Trial Law Review](https://blog.goosmannlaw.com/trial-lawyer-on-you-side)
    - [Trust Law Counsel](https://blog.goosmannlaw.com/estate-planning-laywer-on-your-side)
- Resources 
    - [COVID-19 Resource Toolbox](https://goosmannlaw.com/covid-19-resource-toolbox/)
    - [Podcast](http://podcast.goosmannlaw.com/)
    - [Videos](https://goosmannlaw.com/videos/)
    - [FREE eBooks & Tools](https://goosmannlaw.com/free-ebooks-tools/)
- Contact Us 
    - [Office Locations](https://goosmannlaw.com/locations/) 
          - [Sioux City Law Firm](https://goosmannlaw.com/locations/sioux-city-law-firm/)
          - [Sioux Falls Law Firm](https://goosmannlaw.com/locations/sioux-falls-law-firm/)
          - [Omaha Law Firm](https://goosmannlaw.com/locations/omaha-law-firm/)
          - [Spirit Lake & Spencer Law Firms](https://goosmannlaw.com/locations/spirit-lake-and-spencer-law-firm/)
          - [Real Estate Closings Office](https://goosmannlaw.com/locations/real-estate-closing-office/)
    - [Submit a Testimonial](https://goosmannlaw.com/submit-a-testimonial/)
    - [Sign Up for Our Newsletter](https://goosmannlaw.com/sign-up-for-our-newsletter/)
    - [Pay Online](https://goosmannlaw.com/pay-online-3/)
- [  (855) 843-4531](tel:855-843-4531)

![](https://blog.goosmannlaw.com/hubfs/Blog_Images/Lockbox%20Lawyer/close-button.png)

[tel:855-THE-GLF1](tel:855-THE-GLF1)

# [HIPAA Enforcement is Growing Teeth](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/hipaa-enforcement-is-growing-teeth)

 By [Goosmann Law Team](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/author/goosmann-law-team)   |  10, December 2015 

[READ NOW](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/hipaa-enforcement-is-growing-teeth) <https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fblog.goosmannlaw.com%2Fcyber-lawyer-on-your-side%2Fhipaa-enforcement-is-growing-teeth> <http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.goosmannlaw.com%2Fcyber-lawyer-on-your-side%2Fhipaa-enforcement-is-growing-teeth> <https://www.twitter.com/share?url=https%3A%2F%2Fblog.goosmannlaw.com%2Fcyber-lawyer-on-your-side%2Fhipaa-enforcement-is-growing-teeth> <https://plus.google.com/share?url=https%3A%2F%2Fblog.goosmannlaw.com%2Fcyber-lawyer-on-your-side%2Fhipaa-enforcement-is-growing-teeth> 

[Read Post](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/hipaa-enforcement-is-growing-teeth#article)

[![](https://blog.goosmannlaw.com/hs-fs/hubfs/Logos/Logo1.jpg?width=60&name=Logo1.jpg)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/author/goosmann-law-team) 

[Goosmann Law Team](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/author/goosmann-law-team)

![HIPAA Enforcement is Growing Teeth](https://blog.goosmannlaw.com/hubfs/Blog_Images/HIPPA.jpg "HIPAA Enforcement is Growing Teeth")

The Office of Civil Rights, Department of Health and Human Services recently announced fines against two health care providers for failure to properly implement and follow breach policies for electronic protected health information (ePHI).  In September 2015, an Indiana radiation oncology group agreed to pay a $750,000 fine and implement a corrective action plan after it was investigated and found it the 13-physician group failed to conduct an enterprise-wide risk analysis and did not adopt written policies as required under HIPAA regulations on the removal of ePHI from hardware and removable storage devices.  The group self-reported a breach after an employee’s laptop was stolen from a personal vehicle.  The laptop did not contain ePHI, but backup media in the laptop bag contained unencrypted ePHI including social security numbers, names, and addresses for 55,000 former patients. 

In the second investigation, St. Elizabeth’s Medical Center in Brighton, MA, reached a settlement to pay a $218,500 fine after an investigation revealed the Medical Center used an internet-based document sharing application to store documents that contained ePHI of some 498 patients.  The Medical Center also failed to respond to the known security incident, mitigate harmful effects, and document the incident and outcome of its internal review.  In addition, the Medical Center was fined for a second breach involving ePHI for 595 patients that was improperly stored on a former employee’s laptop and USB flash drive.

OCR continues to increase its enforcement efforts across the nation.  As evidenced by these two recent cases, human error continues to be a significant source of HIPAA violations.  The theft of laptops and external storage devices such as flash drives can and do result in significant exposure.  If your health care facility or practice has not adopted written policies and procedures on the proper management and handling of these devices, you are at risk. 

---

Goosmann Cyber Law Counsel helps companies protect their property, resources, and name. If you are a business owner and need assistance on how to stop visual hacking or for more information on cyber law, contact the [Goosmann Law Firm](http://goosmannlaw.com/) at [info@goosmannlaw.com](mailto:info@goosmannlaw.com) or call (712) 226-4000.

[![CONTACT US](https://no-cache.hubspot.com/cta/default/489404/ec70fe7d-ad02-40c5-93ba-4800375ab6e9.png)](https://cta-redirect.hubspot.com/cta/redirect/489404/ec70fe7d-ad02-40c5-93ba-4800375ab6e9)

### Select Different CTA for each Post from Blog Editor

[![New Call-to-action](https://no-cache.hubspot.com/cta/default/489404/a8cefc17-3b9d-4de0-89cd-e60a64752422.png)](https://cta-redirect.hubspot.com/cta/redirect/489404/a8cefc17-3b9d-4de0-89cd-e60a64752422)

### Subscribe Our Blog

Thanks for submission!!

- Recent
- Popular

### Posts by Topic

- [Cyber Law (43)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-law)
- [cyber (7)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber)
- [cybersecurity (5)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cybersecurity)
- [Business News and Insights (4)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/business-news-and-insights)
- [Cyber Law Trends (3)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-law-trends)
- [Firm News (3)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/firm-news)
- [Media Law and Technology & Science (3)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/media-law-and-technology-science)
- [CEO (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/ceo)
- [Communications Law (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/communications-law)
- [Cyber scams (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-scams)
- [EMV Credit Cards (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/emv-credit-cards)
- [HR Legal Insider (2)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/hr-legal-insider)
- [CFAA (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cfaa)
- [Communications Decency Act (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/communications-decency-act)
- [Cyber Legacy (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/cyber-legacy)
- [DNA (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/dna)
- [Employee Recruiting (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/employee-recruiting)
- [Employment News and Insights (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/employment-news-and-insights)
- [IRS (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/irs)
- [IRS scam (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/irs-scam)
- [IRS scam Sioux City (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/irs-scam-sioux-city)
- [Identity Theft (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/identity-theft)
- [Ransomware (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/ransomware)
- [Sioux City IRS scam (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/sioux-city-irs-scam)
- [South Dakota (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/south-dakota)
- [data breach (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/data-breach)
- [scam (1)](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/topic/scam)

DISCLAIMER: The information in this blog post (“post”) is provided for general informational purposes only, and may not reflect the current law in your jurisdiction. By visiting this website, blog, or post you understand that there is no attorney client relationship between you and the Goosmann Law Firm attorneys and website publisher. No information contained in this post should be construed as legal advice from Goosmann Law Firm, PLC, or the individual author, nor is it intended to be a substitute for legal counsel on any subject matter. No reader of this post should act or refrain from acting on the basis of any information included in, or accessible through, this Post without seeking the appropriate legal or other professional advice on the particular facts and circumstances at issue from a lawyer licensed in the recipient’s state, country or other appropriate licensing jurisdiction.

#### Let Us Know What You Thought about this Post.

Put your Comment Below.

[Previous Post](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/why-keeping-a-clean-desk-is-a-good-idea)

##### [Why Keeping a Clean Desk is a Good Idea](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/why-keeping-a-clean-desk-is-a-good-idea)

[Next Post](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/4-cyber-security-facts-goosmann-law-needs-you-to-know)

##### [4 Cyber Security Facts Goosmann Law Needs You to Know](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side/4-cyber-security-facts-goosmann-law-needs-you-to-know)

### Contact Info

**Sioux City Location**  
 P. 712-226-4000  
 F. (712) 224-4517

**Sioux Falls Location**  
 P. (605) 371-2000  
 F. (605) 275-2039

**Omaha Location**  
 P. (402) 280-7648  
 F. (402) 505-3967

<https://twitter.com/GoosmannLawFirm><https://www.facebook.com/GoosmannLawFirm/><https://plus.google.com/u/0/107039732660783225699> <https://www.linkedin.com/company/goosmann-law-firm>

---

[Disclaimer](http://goosmannlaw.com/list-all-blogs/disclaimer/) | [Privacy Policy](http://goosmannlaw.com/privacy-policy/)

### Locations

**Sioux City Location**  
 410 5th Street  
 Sioux City, IA 51101

**Sioux Falls Location**  
 5010 S. Minnesota Avenue, Suite 100  
 Sioux Falls, SD 57108

**Omaha Location**  
 Advent Building   
 17838 Burke Street, Suite 250  
 Omaha, NE 68118

![Goosmann](https://blog.goosmannlaw.com/hs-fs/hubfs/Blog_Images/Lockbox%20Lawyer/goosmann-white.png?width=250&name=goosmann-white.png "Goosmann")

Goosmann Law Firm is a FULL SERVICE LAW FIRM with locations in Sioux City, Iowa, Sioux Falls, South Dakota, and Omaha, Nebraska. Goosmann Law attorneys are licensed to practice in Iowa, Nebraska, South Dakota, and North Dakota. Their attorney team's practices and industries include but are not limited to Agribusiness and Cooperatives, Banking and Finance, Bankruptcy, Restructuring and Workouts, Business, Construction, Cyber Law and Telecommunications, Divorce and Family Law, Education, Employment, Environmental Health and Safety, Gestational Surrogacy and Adoption, Health Care, Litigation and Trial Law, Manufacturing, Mergers and Acquisitions, Municipal, Nonprofit and Tax Exempt Organizations, Real Estate, and Transportation, Tribal, Wills, Trusts, Estate Planning, and Probate Law.

Goosmann © Copyright 2017