HHS Gets Tough

Healthcare IT News reports that HHS has imposed a $100,000 civil penalty on Providence Health and Services of Seattle for HIPAA violations. "The violation, involving unprotected backup tapes, optical disks and laptops three years ago, compromised the protected health information
of more than 386,000 patients, HHS officials said."

I don't recall HHS previously exercising its civil penalty enforcement authority.