Triple-S Salud fined 6.8M dollars for HIPAA breach

Triple-S Salud has been fined nearly $6.8 million for violations of the federal Health Insurance Portability & Accountability Act (HIPAA), reports Caribbean Business.

The penalty handed down by the Puerto Rico government’s Medical Insurance Administration against the unit of San Juan-based Triple-S Management Corp. stem from a probe into a privacy breach last year. ASES Director Ricardo Rivera said Triple-S Salud was fined $6.7 million improperly handled private health records of more than 13,330 patients in written correspondence to them. Another $100,000 fined was tacked on after the company provided vague or incomplete information during the probe, he said. The sanctions also bar Triple-S Salud from signing up more beneficiaries for its Platino line until it presents a corrective plan to avoid such HIPAA violations.

A notice on ASES’s web site (in Spanish) explains that on September 20, 2013, Triple-S Salud sent a mailing that exposed Medicare Health Insurance Claim Numbers in the mailing addresses.  They became aware of their error on September 23, 2013.

l.12-.057c.834-.407 1.663-.812 2.53-1.211a42.414 42.414 0 0 1 3.345-1.374c2.478-.867 5.078-1.427 7.788-1.427 2.715 0 5.318.56 7.786 1.427z" transform="translate(-128 -243)"/>