First HIPAA enforcement action for lack of timely breach notification settles for $475,000 On January 9, 2017, the OCR announced a $475,000 HIPAA settlement based on the untimely reporting of a PHI breach. Do you know what to do in the event of a breach? Read here for more... Posted on January 11, 2017 by Compliagent and tagged HIPAA healthcare compliance hipaa breach. Comment