Idaho State University is paying a $400,000 to the federal government to settle allegations it improperly exposed confidential medical records.
In August 2011, ISU told the U.S. Department of Health and Human Services of a breach of its unsecured electronic protected health information.
An investigation by the federal agency determined the Pocatello school hadn’t adequately assessed potential risks to medical information shielded from release by the law known as the Health Insurance Portability and Accountability Act, or HIPAA.
As part of the agreement this month, Idaho State won’t contest the amount of the payment.
The school has also agreed to take protective measures, to ensure something similar doesn’t re-occur.
Greg Ehardt, ISU’s new HIPAA officer, says the school has determined none of the 17,500 records that were vulnerable were compromised.
Topics Education Universities
Was this article valuable?
Here are more articles you may enjoy.
Judge Tosses Buffalo Wild Wings Lawsuit That Has ‘No Meat on Its Bones’ 
Lemonade Books Q4 Net Loss of $21.7M as Customer Count Grows 
Former Broker, Co-Defendant Sentenced to 20 Years in Fraudulent ACA Sign-Ups 
World’s Growing Civil Unrest Has an Insurance Sting 
