5 ms·
That's going to be tens of millions of dollars of fines. HIPAA is not anything to mess around with. Data breaches like that are an existential threat to a med
by wins32767 4y ago
That's going to be tens of millions of dollars of fines. HIPAA is not anything to mess around with. Data breaches like that are an existential threat to a medtech.
- junon 4y agoIf memory serves the fines stop after 1.5 million. Please someone correct me if I'm misremembering.
- deleted 4y ago[deleted]
- warent 4y agoIt looks like the maximum penalty (if corrected within 30 days) is about $450,000 as of 2022. However, there is apparently an addendum to the law that the State Attorney General is authorized to impose civil penalties in addition to this. As we see, Anthem settled for $115,000,000 for a similar breach. So, yeah, unless Cerebral gets a very lenient AG, they're done. https://www.hipaajournal.com/court-approves-anthem-115-million-data-breach-settlement/ https://www.hipaajournal.com/court-approves-anthem-115-milli... https://www.hipaajournal.com/what-is-the-maximum-penalty-for-violating-hipaa/ https://www.hipaajournal.com/what-is-the-maximum-penalty-for...
- time0ut 4y agoThey bumped it to 1.9 for inflation. There are also criminal jail time penalties though. It depends on intent. Unlikely it would happen though even if it is deserved.