Providence Health Settles HIPAA Suit, Develops Corrective Plan | Healthcare Informatics Magazine | Health IT | Information Technology Skip to content Skip to navigation

Providence Health Settles HIPAA Suit, Develops Corrective Plan

July 18, 2008
by root
| Reprints

Providence Health and Services (Seattle) will pay a fine of $100,000 to settle potential HIPAA violations and is implementing a corrective action plan to more effectively protect electronic patient information, as a result of a resolution agreement it established with the U.S. Department of Health and Human Services (HHS (Washington, D.C.)

The agreement relates to Providence’s loss of electronic backup media and laptop computers containing individually identifiable health information in 2005 and 2006; the incidents were in violation of the Privacy and Security Rules, according to the organization.

The corrective action plan will require Providence to:
  • Revise its policies and procedures regarding physical and technical safeguards (e.g., encryption) governing off-site transport and storage of electronic media containing patient information, subject to HHS approval;
  • Train workforce members on the safeguards; and
  • Conduct audits and site visits of facilities; and submitting compliance reports to HHS for a period of three years.

The Resolution Agreement and Corrective Action Plan can be found on the OCR Web site at

Providence is a not-for-profit health system providing services to patient communities across five states, including Alaska, Washington, Montana, Oregon and California. The system includes 26 hospitals, more than 35 non-acute facilities, physician clinics, a health plan, and educational facilities.



Survey: Most Providers Say Interoperability by 2020 Not Attainable with Current Federal Policies

The majority of healthcare providers (71 percent) believe that current federal polices, committees and regulations are not sufficient to help the country attain meaningful health IT interoperability by 2020.

House Committee Presses Nuance Executives on NotPetya Attack

he U.S. House Energy and Commerce Committee is requesting that Nuance Communications executives provide more information about the malware incident, called NotPetya, that impacted the company, along with multinational companies in 65 countries, back in June.

Regenstrief Researchers to Study Impact of HIE on Emergency Care

Scientists at the Indianapolis-based Regenstrief Institute are conducting what they say is the first study of health information exchange (HIE) use over multiple years to evaluate whether it improves patient outcomes in emergency departments.

Report: Healthcare Organizations Struggle with Human Error in Securing PHI

In the first nine months of 2017, unintended disclosure accounted for 41 percent of healthcare data breach incidents, according to a report from specialist insurer Beazley.

Three More Providers Receive 2017 HIMSS Davies Awards

Three patient care organizations have received the 2017 global Healthcare Information and Management Systems Society (HIMSS) Enterprise Nicholas E. Davies Award of Excellence for healthcare technology innovations that improve patient outcomes.

Medtronic, American Well Team Up to Integrate Telehealth Capabilities

Medtronic and American Well announced a partnership to offer a telehealth solution focused on the unique needs of the complex, chronic, co-morbid patient population.