Florida and 27 other states reached a $5 million settlement with acute care hospital operator CHS/Community Health Systems Inc. over a 2014 data breach that touched 6.1 million patients nationwide.

The agreement calls on the company to incorporate security awareness and privacy training for all employees with access to protected health information. It also calls for CHS to limit unnecessary access to protected health information.