HIPAA Case: Hospital Fined for Ex-Employee’s Access to PHI

In its third enforcement action in recent weeks, federal regulators have hit a Colorado medical center with a HIPAA fine in a case involving failure to terminate a former employee's remote access to patient data. In a statement, the Department of Health and Human Services' Office for Civil Rights said Pagosa Springs Medical Center in Colorado has agreed to pay a $111,400 financial settlement and adopt a substantial corrective action plan to resolve potential HIPAA violations.