"'When senior level executives intentionally and repeatedly violate HIPAA by disclosing identifiable patient information, OCR will respond quickly and decisively to stop such behavior,' said OCR Director Leon Rodriguez. In addition to the settlement amount, the CAP requires [Shasta Regional Medical Center of Redding, California,] to revise and distribute its policies and procedures on safeguarding PHI, obtain compliance certifications from its workforce, conduct PHI-related training for employees, and report any violations of these policies to HHS."  MORE >>