MGMA asks OCR: Hold UHG responsible for HIPAA breach notifications

In yet another ripple from the Change Healthcare cyberattack, the Medical Group Management Association has sought assurances from HHS' Office for Civil Rights that the onus for sending HIPAA breach notifications to affected patients would fall squarely on Change and its parent company – and not physician practices and other providers.

WHY IT MATTERS

UnitedHealth Group issued a press release this week where, in addition to other updates, it pledged that it would "help ease reporting obligations on other stakeholders …

assurances breach change change healthcare civil civil rights cyberattack healthcare hhs hipaa management medical notifications ocr office patients practices responsible rights ripple