Partner Kimberly Gordy explains how the recent Health Fitness Corporation settlement involves a HIPAA risk analysis, not a risk assessment in an article for Cosmos titled “BA Settles HIPAA Case Under OCR’s New Risk Analysis Initiative.” Published March 31, 2025, the article discusses the enforcement action against Health Fitness Corporation and its potential violation of the HIPAA Security Rule.