While regulators say they’re cracking down on insurers, hospitals and doctors’ offices that don’t adequately protect the security and privacy of medical records, the data on enforcement tells a different story, ProPublica reports. Since October 2009, healthcare organizations have reported more than 1,140 large breaches affecting more than 41 million people to the Office for Civil Rights (OCR). In addition, 120,000 smaller breaches have been reported. The OCR has the authority to fine organizations up to $1.5 million per violation, but some say the agency isn’t flexing its muscles enough. It took the OCR five years, for example, to fine Parkview Health System $800,000 for its breach. Adam Greene, a former OCR official, said the office is “overwhelmed.”
Full Story