New York City hospital center settles $ 387,200 HIPAA breach - The federal government in May settled a potential violation of the Health Insurance Portability and Accountability Act with a New York City hospital that reportedly disclosed sensitive health information to a patient ’s employer . St. Luke’s - Roosevelt Hospital Center paid $ 387,200 to settle the potential violations of the HIPAA Privacy Rule and agreed to implement a comprehensive corrective action plan , according to a news release from the Office for Civil Rights of the U.S. Department of Health & Human Services . ;