Healthcare Chief Information Security Officer (CISO), Virtual Privacy Officer and HIPAA Compliance Educator and National Speaker on Healthcare Privacy & Security
A small pediatric clinic in Colorado thought they had HIPAA handled. They'd trained their staff once — back in 2014. When OCR came knocking
A Receptionist, a Phone Call, and a $1.5 Million Problem A hospital receptionist confirmed a patient's diagnosis to someone who claimed to
In February 2011, a health plan called Cignet Health of Prince George's County, Maryland received a $4.3 million civil monetary penalty from
A mental health counselor in private practice once told me she didn't need to worry about HIPAA because she wasn't a
The Inspection That Exposed Two Problems at Once A clinic in the Midwest got an OSHA inspection after a needlestick injury went unreported. The compliance
In August 1996, President Bill Clinton signed a law that most people in healthcare couldn't even pronounce correctly. Thirty years later, that same
A therapist I consulted with last year was using the standard Google Voice app to confirm appointments, send session reminders, and even discuss medication changes
A hospital employee in Texas forwarded a patient's lab results to a family member who called and asked nicely. No written authorization. No
In 2018, a medical billing company called Advanced Care Hospitalists paid $500,000 to settle with OCR after a business associate it hired gained access
In February 2023, Banner Health agreed to pay $1.25 million to the Office for Civil Rights after a breach exposed the ePHI of nearly
A 22-employee cardiology practice in Tennessee paid $2.3 million to settle HIPAA violations in 2020 — and the root cause wasn't a sophisticated
A Therapist's Worst Nightmare Started With a Default Password In 2022, a mid-sized behavioral health practice in the Southeast discovered that session notes
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.