Thank you for posting Rachel V. Rose, JD, MBA.

← Back to Blog

Thank you for posting Rachel V. Rose, JD, MBA. There’s a Royal train coming up behind UnitedHealth Group, and it’s full of regulation, compliance, and the potential for significant damages to be awarded against the company, following its 2024 data breach. As Iowa’s state attorney general files a lawsuit against UHG, seeking financial damages, civil penalties, and improvements to the company’s data security.

Iowa State is seeking restitution, including civil penalties of $40,000 per violation under consumer laws, civil penalties of $5,000 for each violation under consumer laws for ‘older’ individuals, and violations under the State’s Security Breach Protection Act. With Change Healthcare processing more than 1 million claims per year, it could result in damages far greater than the $16 million Anthem HIPAA settlement with the HHS OCR.

The case will be one to watch, as Iowa follows Nebraska in filing litigation against UHG. More States may line up to launch lawsuits. But UHG has deep pockets

@Thaddeus Dziekanowski Brian D. McCarthy

@Parava Security Solutions

There are state and federal cyber regulations to fall back on, including HIPAA and the SEC’s final cyber rule to set regulatory compliance precedent

https://lnkd.in/egKk5NQd

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7445823966272819200

Categories

Cybersecurity, Legal, Regulation & Compliance