The Department of Health and Human Services reported on its website a $3,000,000 settlement with Touchstone Medical Imaging. One of Touchstone's servers allowed access to ePI-lI via the internet. More than 300,000 paiients were impacted. The ePH] included names, Social Security information, and more. Touchstone did not investigate the matter in a timely manner. The investigation also found that a risk analysis had not been conducted and business associate agreements were not in place. Department of Health and Human Services. 2019. Tennessee Diagnostic Medical Imaging services Company Pays $3,000,000 to Settle Breach Exposing over 300,000 patients' Protected Health Information. httpsszmvwhhs.govfaboutfnewsf2019f05f0ftennessee-diagnostic-medicaI-imaging- services-company-pays-3000000-settle-breach.html. Real-World Case Discussion Questions 1. Identify actions Touchstone Medical Imaging could have taken to prevent this breach. 2. Identify actions Touchstone Medical Imaging should have taken to investigate the breach. 3. Identify the actions that Touchstone Medical Imaging took or did not take that caused HHS to award the penalty