Two entities have paid the U.S. Department of Health and Human Services Office for Civil Rights (OCR) $1,975,220 collectively to resolve potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules. After receiving a breach report of a stolen laptop from Concentra Health Services, an OCR investigation determined that multiple…