The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has imposed its first financial penalty of the year, with Montefiore Medical Center agreeing to settle alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) by paying a $4.75 million penalty.