AAMC Joins Provider Groups to Urge HHS to Clarify UHG Breach Reporting Requirements

The AAMC joined over 50 other provider groups in a letter to the Department of Health and Human Services Secretary Xavier Becerra (PDF) urging the agency to provide more clarity around Change Healthcare’s (UHG’s) data breach reporting responsibilities under HIPAA following the February cyberattack. The letter asked the Office for Civil Rights (OCR) to publicly assure affected providers that its breach investigation and efforts at remediation are focused on UnitedHealth Group’s Change Healthcare, and not providers affected by the breach. This letter follows a letter last week to UHG’s CEO urging the company to directly notify patients of the data breach [refer to Washington Highlights, May 10].