It is not only the GDPR: "The resolution comes as a result of an extensive investigation initiated following a phishing attack that compromised the electronic

It is not only the GDPR: "The resolution comes as a result of an extensive investigation initiated following a phishing attack that compromised the electronic protected health information of approximately 34,862 individuals." "This marks a historic moment, as it represents the first settlement OCR has concluded concerning a phishing attack under the Health Insurance Portability and Accountability Act (HIPAA) Rules—a federal law safeguarding the privacy and security of health information." "In response, Lafourche Medical Group has agreed to a settlement of US$480,000 with OCR and will implement a comprehensive corrective action plan under OCR’s monitoring for the next two years."