HHS collected a record
$28.7 million from healthcare providers and insurers in 2018 for inadequate responses to data breaches. The total for violations under the Health Insurance Portability and Accountability Act surpassed the previous record in 2016 of $23.5 million, according to HHS’ Office for Civil Rights. The total included a $16 million settlement with insurer Anthem for a 2015 data breach that hit nearly 79 million people. The agreement was the largest settlement ever reached for a breach under HIPAA. While OCR celebrates it's record-setting year, the CMS wants to know how to reduce HIPAA burdens on care coordination.