Care New England pays $400,000 HIPAA fine for lost PHI in business associate breach

Care New England Health System has agreed to pay $400,000 to settle HIPAA violations. The violations occurred when unencrypted backup tapes containing the ultrasound studies of 14,000 individuals went missing. The tapes contained protected health information. The case highlights the importance of reviewing and updating business associate agreements.