Cadia Healthcare Facilities and the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) settled for $182,000 over alleged HIPAA violations, according to an announcement.
OCR received a complaint in September 2021 that the following information about a patient was published on Cadia Healthcare Facilities’ website without their consent:
Their name
Their photo
Details of their health conditions
What treatments they received
Details about their recovery
Cadia Healthcare Facilities allegedly published this information as a “success story” and did not collect “a valid, written HIPAA authorization from the patient,” according to HHS. Upon analyzing the situation, OCR found that the accusation was true. They also discovered that the facility did this to 150 patients, not just the one.
Cadia Healthcare Facilities will undergo a corrective action plan in addition to paying the settlement.
