EP 171: Recent HIPAA Settlement Aimed at Group Health Plans
In this episode, Chase Cannon and Suzanne Spradley discuss a recent HHS Office for Civil Rights settlement showing that self-insured employer-sponsored group health plans are not outside the reach of HIPAA enforcement — especially when ransomware, electronic PHI, and incomplete risk analysis are involved.



