The penalty was levied against Cignet Health of Maryland and is the first civil money penalty issued by the Department for a covered entity’s violations of the HIPAA Privacy Rule.
Cignet apparently refused to turn over protected health information to individuals when they requested it. 41 individuals complained about this issue. Investigations were apparently obstructed and was not forthcoming in addressing complaints.
The amount has been set high, likely under the allowance for "willful neglect."