Dermatology Practice to Pay $150,000 In First-of-Kind Breach Notice Settlement

A Massachusetts-based dermatology practice has agreed to pay $150,000 to settle claims that it violated federal privacy rules, according to the Department of Health and Human Services.

The pact marks the first settlement with a Health Insurance Portability and Accountability Act-covered entity for failing to have sufficient policies and procedures in place to address the breach notification provisions in the Health Information Technology for Economic and Clinical Health (HITECH) Act, the HHS said in a Dec. 26 statement.

The HHS Office for Civil Rights said that Adult & Pediatric Dermatology PC (APDerm) of Concord, Mass., is also required, as part ...