The first lawsuit by a state attorney general under HIPAA has been filed. This is big news because previous class action suits citing failure to protect private information have failed to gain traction for lack of damages (i.e. mere failure to protect was not enough). Using new enforcement powers under HIPAA, the state’s attorney general can bring charges for failure to protect and enforce under HIPAA. Download the entire news story.