On June 15, 2018, the U.S. District Court for the District of Columbia ruled that the HIPAA statute does not provide a private cause of action. A patient at a hospital in Washington, District of Columbia, claimed that the medical intake computer station violated HIPAA’s privacy protections. She filed a complaint with the Office for Civil Rights (OCR) and the District of Columbia’s Office of Human Rights, but neither would pursue her claims.

PCG was recently awarded a one-year engagement with the California Department of Public Health (CDPH) to complete an independent Health Insurance Portability and Accountability Act (HIPAA) risk assessment. The purpose of this project is to perform an independent risk assessment to ensure CDPH fulfills State Administration Manual (SAM) and HIPAA risk assessment and management requirements.