The University of Texas MD Anderson Cancer Center has filed a lawsuit against a $4.3 million HIPAA fine against it. The cancer center argues that the fine was unlawful because it is a “state agency” The penalty was imposed following three data breaches involving unencrypted devices. MD Anderson is seeking a permanent injunction preventing HHS from attempting to enforce or collect the penalty imposed against MD Anderson as well as to recover its costs associated with the lawsuit. In the complaint, MD Anderson argues that HHS exceeded its authority by imposing the penalty “beyond the statutory caps” under HIPAA.”]
Source: https://www.cuinfosecurity.com/md-anderson-cancer-center-appeals-43-million-hipaa-fine-a-12371