Virtual Noncompliance: OCR Settles With CSP Business Associate for $90,000

Virtual Noncompliance: OCR Settles With CSP Business Associate for $90,000

On January 7, 2025, the Department of Health and Human Services (HHS)’ Office for Civil Rights (OCR) announced a $90,000 settlement (with a one-year corrective action plan, or CAP) with Virtual Private Network Solutions, LLC (VPN Solutions). VPN Solutions is a HIPAA business associate that provides data hosting and cloud services to HIPAA covered entities (health plans, health care clearinghouses, and most health care providers) and other HIPAA …

HHS OCR Settlements: Last Week in Review

During the week of January 6, 2025, the U.S. Department of Health and Human Services’ Office for Civil Rights entered into resolution agreements and corrective action plans with Elgon Information Systems, Virtual Private Network Solutions, LLC and USR Holdings, LLC for violations of the Health Insurance Portability and Accountability Act of 1996 Security Rule.Continue Reading ›