Latest HIPAA Data Breach Penalty Contains Important Messages | Semel Consulting: The latest HIPAA data breach penalty reported by the US Department of Health and Human Services (HHS) Office for Civil Rights (OCR) includes some simple but important messages for all health care organizations and their Business Associates.