Home
Forms Library
CHSPSC Resolution Agreement and Corrective Action Plan CHSPSC HIPAA Enforcement Action

Get the up-to-date CHSPSC Resolution Agreement and Corrective Action Plan CHSPSC HIPAA Enforcement Action 2025 now

CHSPSC Resolution Agreement and Corrective Action Plan CHSPSC HIPAA Enforcement Action Preview on Page 1

Show details

4.8 out of 5

21 votes

The document is a Resolution Agreement between the United States Department of Health and Human Services (HHS) and CHSPSC LLC, addressing violations of HIPAA Rules related to a data breach that compromised the personal health information of over 6 million individuals. The agreement outlines the obligations of CHSPSC to pay a resolution amount of $2.3 million and implement a Corrective Action Plan (CAP) to enhance compliance with privacy and security standards. It includes provisions for monitoring, risk analysis, policy revisions, training, and reporting requirements to prevent future breaches.

Here's how it works

01. Edit your form online

Type text, add images, blackout confidential details, add comments, highlights and more.

02. Sign it in a few clicks

Draw your signature, type it, upload its image, or use your mobile device as a signature pad.

03. Share your form with others

Send it via email, link, or fax. You can also download it, export it or print it out.

The best way to modify CHSPSC Resolution Agreement and Corrective Action Plan CHSPSC HIPAA Enforcement Action online

Ease of Setup

DocHub User Ratings on G2

Ease of Use

DocHub User Ratings on G2

With DocHub, making adjustments to your documentation takes only some simple clicks. Make these fast steps to modify the PDF CHSPSC Resolution Agreement and Corrective Action Plan CHSPSC HIPAA Enforcement Action online for free:

Sign up and log in to your account. Log in to the editor using your credentials or click Create free account to examine the tool’s functionality.
Add the CHSPSC Resolution Agreement and Corrective Action Plan CHSPSC HIPAA Enforcement Action for editing. Click on the New Document option above, then drag and drop the file to the upload area, import it from the cloud, or using a link.
Change your file. Make any adjustments required: insert text and photos to your CHSPSC Resolution Agreement and Corrective Action Plan CHSPSC HIPAA Enforcement Action, highlight details that matter, erase parts of content and substitute them with new ones, and insert icons, checkmarks, and areas for filling out.
Finish redacting the form. Save the modified document on your device, export it to the cloud, print it right from the editor, or share it with all the parties involved.

Our editor is super user-friendly and effective. Give it a try now!

be ready to get more

Complete this form in 5 minutes or less

Get form

Got questions?

We have answers to the most popular questions from our customers. If you can't find an answer to your question, please contact us.

What is a resolution agreement?

Covered entities and specified individuals, as explained below, who knowingly obtain or disclose individually identifiable health information, in violation of the Administrative Simplification Regulations, face a fine of up to $50,000, as well as imprisonment up to 1 year.

What is the penalty for a HIPAA data breach?

Penalty range: $1,000 to $50,000 per violation, with an annual maximum of $1.5 million for identical violations.

How much trouble can you get in for violating HIPAA?

The minimum fine for criminal violations of HIPAA is $50,000. The maximum criminal penalty for a HIPAA violation by an individual is $250,000. Restitution may also need to be paid to the victims. In addition to the financial penalty, a jail term is possible for a criminal violation of HIPAA Rules.

What is the corrective action plan for HIPAA?

A resolution agreement is a settlement agreement signed by HHS and a covered entity or business associate in which the covered entity or business associate agrees to perform certain obligations and make reports to HHS, generally for a period of three years.

What is the fine for a HIPAA data breach?

A complaint should be filed before legal action is taken against the covered entity under state laws. Complaints must be filed within 180 days of the discovery of the violation, although in limited cases, an extension may be granted.