Skip To The Main Content

OCR Takes $3.5 Million HIPAA Action Against FMCNA

The United States Office for Civil Rights (OCR) has taken a $3.5 million action against Fresenius Medical Care North America (FMCNA) for violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA).  OCR found that FMCNA had failed to conduct an accurate and thorough risk analysis of potential risks and vulnerabilities to the confidentiality, integrity, and availability of all of its electronic protected health information, and had allowed unauthorized access to and disclosure of such patient information.  To read the OCR announcement and summary of its action against FMCNA, and to access the complete OCR resolution agreement and corrective action plan, use the link below.