Rite Aid pays $1 million for violating HIPAA.

• Position: PRIVACY - Brief article

Rite Aid Corp. and its 40 affiliated entities (RAC) have agreed to pay $1 million to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule, the U.S. Department of Health and Human Services (HHS) announced.

In a coordinated action, RAC also signed a consent order with the Federal Trade Commission (FTC) to settle potential violations of the FTC Act.

Rite Aid has also agreed to take corrective action to improve its policies and procedures to safeguard the privacy of its customers when disposing of personally identifiable information. The settlements apply to all of Rite Aid's nearly 4,800 retail pharmacies and follow an extensive...