Affinity Health Plan pays $1.2 million to settle Health & Human Service Dept. allegations that it forgot to scrub hard drives on borrowed photocopiers, leading to a HIPAA violation of more than 344,000 patient records.