HIPAA & Breach Enforcement Statistics for October 2017
OCR is investigating 365 breaches affecting approximately
16,959,816 patients as of Sept. 17, 2017, according to an analysis
of the the last two years of agency’s data by HIP/SA.
That stood in stark contrast to the previous month in which the
agency was investigating 351 breaches affecting approximately
27,627,331 patients. The dramatic shift in numbers reflected the
fact that the agency placed 21 breaches in its archived data.
However, the fact that a breach has been archived does not mean
that OCR has closed its investigation, the agency told HIP/SA.
Those newly archived breaches affected 11,053,885 patients.
That included the removal of a breach suffered by Excellus Health
that affected 10,000,000 patients. Excellus Health reported that
breach on Sept. 9, 2015.
Pace of HIPAA Patient Complaints Continues to RiseOCR received 163,277 as of Aug 31, indicating that it received
2,350 patient complaints in August, compared to 2,093 in July and
1,960 in June, according to an analysis of the agency's statistics
The figures indicated that OCR resolved 159,633 complaints.
But of those, only 36,690 fell within its jurisdiction. Of those, 25,373
required some action by a Covered Entity or Business Associate.
That suggested that 61 complaints required some action in August
compared to 55 in July and 90 in June.