HHS Fines Children’s Hospital Colorado Over $548K for HIPAA Violations

The HHS Office for Civil Rights has fined Children’s Hospital Colorado $548,265 for multiple violations of HIPAA privacy and security rules. An investigation revealed the hospital's inadequate security measures, including failing to perform a thorough risk analysis and lapses in policies for managing electronic protected health information (ePHI). This enforcement action highlights the critical need for healthcare organizations to strengthen their cybersecurity practices to safeguard patient data from unauthorized access.

Opens on HHS