The NHS has announced that it will be bringing corrective plan to settle potential Health Insurance Portability and Accountability Act (HIPAA) violations. As per the corrective plan, the hospital will be required to implement HHS-approved security and privacy procedures. Moreover, they will also be required to conduct "regular and robust" training of all UCLA health system employees that use protected health information.

The corrective plan will give hospitals the authority to appoint an independent assessor to audit compliance with the requirements over a three-year period. It has been revealed that the fine on employees violating the rules will be decreased.

Meanwhile, two unidentified celebrity patients have compliant that UCLA hospital staff had inappropriately accessed their electronic protected health information. An investigation in the case has been set by HHS's Office of Civil Rights (OCR).

It has been revealed that, in 2005 and 2009, OCR found many cases in which hospital employees were found guilty of accessing protected health information of patients. Moreover, in 1995, another hospital person was found guilty of selling patient’s health information to the media.

The cases of HIPPA violation has increased manifold. This year OCR has penalized an amount of $4.3 million on health insurer Cignet Health for refusing to provide patients with access to their medical records as required under HIPAA. The growing violations have made NHS worrisome.