An OCR audit into MedEvolve after a 2018 healthcare data breach found the business associate several possible HIPAA violations, including failing to conduct a risk analysis.
Article Link: MedEvolve pays OCR $350K penalty over ‘insufficient’ HIPAA risk analysis | SC Media