Case Detail

Back to Search Results View Images Request Certification

PIF Number:
3547
Case Name:
In re Anthem
Supplier:
Anthem, Inc.
Case Number:
0000
Date in Pif:
9/30/2020
Court:
County:
Keywords:
Statute Cites:
Rules & Regulations:
Subject Matter:
Privacy
Category:
Data Breach
Sub-Category:
Issue Summary:
Supplier agrees to: 1) develop, implement, and maintain a written information security program reasonably designed to protect the security, integrity, and confidentiality of information collected, stored, transmitted, and maintains, 2) the information security program shall comply with any applicable federal or state requirements, 3) the information security program shall be written and modified to allow access to personal health information consistent with the minimum necessary standard, 4) regularly monitor, log, and inspect network traffic including log-in attempts, through the use of hardware, software, or procedural mechanisms that record and evaluate such activity, 5) authorize and authenticate relevant device, user, and network activity within the Anthem Network, and 6) require appropriate authorization and authentication prior to any user's access to the Anthem Network. Supplier to pay $39,500,000 to the participating states; $1,880,302.06 to be paid to the Ohio Attorney General's Office. EDITOR'S NOTE: see agreement for additional terms.