This post, Lack of BAA at Center of New HIPAA Settlement, first appeared on http://www.govinfosecurity.com. Marianne Kolbasuk McGee (HealthInfoSec) • April 24, 2017 Federal regulators have signed a $31,000 HIPAA settlement with a small Illinois-based pediatric specialty practice, citing the lack of a business associate agreement with a vendor hired to store paper records containing patients’ protected health information. Although the April 21 settlement with the Center for Children’s Digestive Health centers on paper-based PHI, […]