Tag Archives: Settlement

Dumpster Diving Leads to $100,000 Fine for Defunct Business Associate Due to Improper Disposal of Medical Records

On February 13, 2018, the HHS Office for Civil Rights (OCR) announced a $100,000 settlement with a court-appointed receiver representing Filefax, Inc. (Filefax) arising from the 2015 discovery of medical records that contained protected health information (PHI) of over two thousand individuals in a dumpster. Filefax, a now-defunct medical records moving and storage company located in Illinois, acted as a business associate under HIPAA.

OCR initiated an investigation in February, 2015, after receiving an anonymous complaint concerning medical records that had been discovered and delivered to a facility for shredding …

EHR Vendor Settles False Claims Act Suit for $155 Million

Electronic health record (EHR) vendor eClinicalWorks (eCW) recently entered into a settlement with the US Department of Justice (DOJ) and the Department of Health and Human Services’ Office of Inspector General (OIG) to resolve allegations under the federal False Claims Act (FCA) that eCW misrepresented its software and paid customers kickbacks to promote its products. The settlement imposes joint and several liability for payment on the EHR Vendor and three of its founders for $154.92 million, and liability for settlement payments individually by a developer ($50,000) and two project managers …