Massachusetts AG settles HIPAA and fraud allegations with Transformative Healthcare
The Massachusetts Attorney General settled alleged HIPAA and MassHealth fraud violations with Transformative Healthcare and its subsidiaries for $1,000,000. The settlement requires destruction of personal and protected health information within 45 days and compliance with HIPAA Privacy and Security Rules.
- Framework
- HIPAA
- Who it concerns
- Transformative Healthcare, LLC and its subsidiaries, including Fallon Service, LLC and Fallon Emergency Medical Services, LLC.
What changed?
Each point with the sentence from the source that says it.
The settlement requires Transformative Healthcare and Fallon to destroy personal information and protected health information within 45 days of the effective date of the consent judgment.
the settlement requires Transformative Healthcare and Fallon to ensure compliance with the Massachusetts Consumer Protection Act, Data Breach Notification Law, Data Security Regulations, Dispositions and Destruction of Records Law, and the HIPAA Privacy and Security Rules, and includes the requirement to destroy personal information and protected health information within 45 days of the effective date of the consent judgment
The Massachusetts Attorney General determined that Transformative Healthcare had failed to maintain an appropriate written information security program.
The Massachusetts Attorney General determined that Transformative Healthcare had failed to maintain an appropriate written information security program
Transformative Healthcare and Fallon violated the Massachusetts Data Security Regulations and HIPAA 45 CFR Part 164, Subpart A, Subpart C, and Subpart E.
Transformative Healthcare and Fallon violated the Massachusetts Data Security Regulations and HIPAA 45 CFR Part 164, Subpart A (General Provisions of HIPAA), Subpart C (Security Standards for the Protection of Electronic Protected Health Information of the HIPAA Security Rule), and Subpart E (Privacy of Individually Identifiable Health Information of the HIPAA Privacy Rule)
Which policies should you review?
Suggested from the change above. Check the source before you edit.
- HIPAA Security Rule Policy
Review the Security Rule Policy to ensure it includes requirements for maintaining an appropriate written information security program.
- HIPAA Privacy Rule Policy
Review the Privacy Rule Policy to ensure it addresses the protection of personal and protected health information as required by HIPAA.
- HIPAA Breach Notification Policy
Review the Breach Notification Policy to ensure it includes procedures for timely notification in the event of unauthorized access to protected health information.