Private practice pays $100,000 settlement for potential HIPAA violation

Ogden, Utah — The Office for Civil Rights announced March 3 that it had reached a settlement with Dr. Steven A. Porter’s medical practice to settle a potential violation of the Health Insurance Portability and Accountability Act security rule.

The OCR began investigating when Dr. Porter’s practice filed a breach report with the OCR related to a dispute with a business associate. During the investigation, the OCR found that Dr. Porter had failed to conduct a risk analysis or create a risk management plan, both HIPAA requirements.

In addition to the settlement, Dr. Porter will undertake a corrective action plan and be monitored for two years.

The ADA has a Complete HIPAA Compliance Kit available on its website. This item will assist in training staff and implementing a comprehensive program for HIPAA compliance. The kit includes The ADA Practical Guide to HIPAA Compliance: Privacy and Security Manual with digital forms and training videos. Use promo code 20109 before May 15 to receive a 15% discount. To access the product, visit