article thumbnail

Settlement Reached in Excellus HIPAA Class Action Lawsuit

Compliancy Group

Excellus agreed to make the following changes to their business practices: Increasing and maintaining a minimum information security budget. Developing strategies to ensure records containing PHI are disposed of within one year of the original retention period.