If the Company does not comply with existing or new laws and regulations related to protecting the privacy and security of personal or health information, it could be subject to monetary fines, civil penalties or criminal sanctions. In the U.S., the Health Insurance Portability and Accountability Act of 1996 (HIPAA) privacy and security regulations, including the expanded requirements under U.S. Health Information Technology for Economic and Clinical Health Act (HITECH), establish comprehensive standards with respect to the use and disclosure of protected health information (PHI) by covered entities, in addition to setting standards to protect the confidentiality, integrity and security of PHI. HIPAA restricts the Company’s ability to use or disclose PHI, without patient authorization, for purposes other than payment, treatment or healthcare operations (as defined by HIPAA), except for disclosures for various public policy purposes and other permitted purposes outlined in the privacy regulations. If the laboratory operations use or disclose PHI improperly under these privacy regulations, they may incur significant fines and other penalties for wrongful use or disclosure of PHI in violation of the privacy and security regulations, including potential civil and criminal fines and penalties.
There are no unresolved staff comments as of the date of this report.