The U.S. Department of Health and Human Services (HHS) settled healthcare data breach charges alongside the Office for Civil Rights (OCR).