New York City hospital center settles $387,200 HIPAA breach - The federal government in May settled a potential violation of the Health Insurance Portability and Accountability Act with a New York City hospital that reportedly disclosed sensitive health information to a patient’s employer.  St. Luke’s-Roosevelt Hospital Center paid $387,200 to settle the potential violations of the HIPAA Privacy Rule and agreed to implement a comprehensive corrective action plan, according to a news release from the Office for Civil Rights of the U.S. Department of Health & Human Services.;