OCR Announces $1.55 Million Settlement Based on Failure to Have a Business Associate Agreement in Place and Conduct an Organization-Wide Risk Analysis March 18, 2016