Steven A. Porter, MD, a gastroenterologist in Ogden, UT, reported to HHS OCR on 2014-05-06 an Improper Disposal breach affecting 500 individuals, with breached information located on a Network Server. OCR's investigation found ongoing noncompliance with the HIPAA Security Rule, including failure to conduct enterprise-wide risk analyses and inadequate policies. The Practice agreed to a $100,000 settlement and a two-year corrective action plan with OCR monitoring.
Affected (this filing): 500