Connecticut Attorney General Settles First Action for HIPAA Violations Under Hitech | Med Law Blog | Tucker Arensberg, P. C.

Contributed by Paul J. Welk

Connecticut Attorney General Richard Blumenthal announced a settlement — the first of its kind in the nation — on July 6, 2010 with Health Net and its affiliates for failing to secure private patient medical records and financial information on nearly a half million Connecticut enrollees and promptly notify consumers endangered by the breach.

The settlement marks the first action by a state attorney general for violations of the federal Health Insurance Portability and Accountability Act of 1996 (HIPAA) since the Health Information Technology for Economic and Clinical Health Act (HITECH) authorized state attorneys general to enforce HIPAA.

The Attorney General sued after Health Net allegedly lost a computer disk drive in May 2009 containing protected health and other private information on more than 500,000 Connecticut citizens` and 1.5 million consumers nationwide. The missing disk drive contained names, addresses, social security numbers, protected health information and financial information. To read more about the settlement, click here.