Lifespan Health System Affiliated Covered Entity (Lifespan ACE), a non-profit health system based in Rhode Island, has agreed to pay $1,040,000 to the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) and to implement a corrective action plan to settle potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules related to the theft of an unencrypted laptop.Lifespan ACE includes many healthcare provider affiliates in Rhode Island, and has designated itself as a HIPAA affiliated covered entity.
Share this post
Author: Roger Shindell
Roger Shindell is CEO of Carosh Compliance Solutions. Shindell currently Chair of HIMSS Privacy and Security Committee’s Risk Assessment Work Group and serves as a Council Member of AHIMA’s Privacy and Security Practice Council. He has more than 30 years of multidisciplinary experience and has served as an advisor and principal in healthcare, technology, and service companies.