The U.S. Department of Health and Human Services, Office for Civil Rights (OCR), has announced a Health Insurance Portability and Accountability Act of 1996 (HIPAA) civil money penalty on the impermissible disclosure of unsecured electronic protected health information (ePHI).  Children’s Medical Center of Dallas (Children’s) did not file a timely request for a hearing by the date in accordance with the instructions in the Notice of Proposed Determination and have paid the full civil money penalty of $3.2 million.