The Department of Health and Human Services (“HHS”) just announced a pair of settlements arising out of the theft of two laptops containing protected health information (“PHI”).  Two entities, Concentra Health Services (“Concentra”) and QCA Health Plan, Inc. of Arkansas (“QCA”), have agreed to pay the HHS Office for Civil Rights (“OCR”) nearly $2 million to settle alleged violations of the Health Insurance Portability and Accountability Act (“HIPAA”). In announcing the settlements in a press release, the HHS message was clear: encrypt PHI on mobile devices or be prepared to shell out vast sums of money in HIPAA penalties.

You can read the full post, view and subscribe to the blog by going to