5 breaches cost $3.5 million for national provider in HHS settlement

Fresenius Medical Care North America has settled with the U.S. Department of Health and Human Services Office of Civil Rights for $3.5 million. The settlement is related to five separate HIPAA violations that occurred at FMCNA-covered entities in 2013. The investigation found that FMCNA failed to conduct thorough risk analyses and allowed unauthorized access to electronic patient data. In addition to the fine, FMCNA will need to complete a risk analysis, revise policies and procedures, and educate staff.