Skip To The Main Content

OCR Takes HIPAA Action Against Filefax

The United States Office for Civil Rights (OCR) has taken action against Filefax, Inc., for violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA).  OCR is taking the action even though Filefax is in liquidation and is going out of business.  OCR found that Filefax had failed to protect patient records it possessed, leaving them unsecured, including in a truck in a parking lot that anyone had access to.  Filefax also did not appropriately transfer patient records for destruction by shredding.  To read the OCR announcement and summary of its action against Filefax, and to access the complete OCR resolution agreement and corrective action plan, use the link below.