St. Luke’s-Roosevelt Hospital Center has paid $387,000 and agreed to a corrective action plan to settle a case involving “careless handling of HIV information” The Department of Health and Human Services’ Office for Civil Rights says a staff member at the Spencer Cox Center for Health impermissibly disclosed the complainant’s protected health information to the individual’s employer. The settlement amount in the case reflects the sensitive nature of information that was breached, says privacy attorney Kirk Nahra.”]
Source: https://www.inforisktoday.com/big-settlement-in-privacy-case-involving-2-patients-hiv-data-a-9944