It appears that the US HHS is adopting the UK approach of heavy fines for small data breaches [TA 10 Aug]. $1.5 million was the cost of the HHS-Office of Civil Rights (OCR) penalty against Massachusetts Eye and Ear Infirmary,… Read moreA very big fine for a very small data breach (US)