In this episode, Chase Cannon and Suzanne Spradley review several recent HIPAA violation settlements from the HHS Office for Civil Rights. Chase starts off by reviewing the general HIPAA obligations of fully and self-insured plans, including the importance of a HIPAA risk assessment. Chase and Suzanne discuss three real-life scenarios outlining ways in which companies experienced HIPAA breaches. Chase emphasizes the importance of a solid IT and technology team as part of a company’s HIPAA privacy and security strategy, including the development and implementation of certain policies and procedures. The two also discuss lessons learned from the settlements in the context of an employer group health plan.