My colleague, Blake Schofield, has sent an Alert to our health law clients regarding an enforcement action taken by the U.S. Department of Health and Human Services, Office of Civil Rights (OCR) against a hospice provider in Idaho relating to a stolen laptop. The number of affected patients was less than 500. The OCR fine was $50,000.

The Alert discusses the significance of this action and reminds covered entities of their HIPAA obligations. Since employer group health plans are HIPAA covered entities with HIPAA responsibilities, I commend the Alert to our employer clients as well.