Worker takes patient records, university pays HIPAA fine

Lest there be any doubt that employers are ultimately responsible for keeping confidential information under wraps, consider the case of the University of Rochester Medical Center. It is now paying for a security breach that was entirely preventable.