Healthcare Chief Information Security Officer (CISO), Virtual Privacy Officer and HIPAA Compliance Educator and National Speaker on Healthcare Privacy & Security
In 2018, a small dermatology practice in Massachusetts called Adult & Pediatric Dermatology, P.C. paid $150,000 to settle a HIPAA case. The trigger?
A Single Needlestick Changed Everything for This Clinic A medical assistant at a small urgent care clinic in Ohio stuck herself with a contaminated needle
A small dental practice in Georgia gets hit with a $70,000 penalty because a front-desk employee left a box of patient files on a
A Missing Checkbox Cost This Hospital $387,000 In 2019, Bayfront Health St. Petersburg agreed to a $85,000 corrective action settlement with OCR after
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR found that the organization had policies on
A Stolen Laptop, a Missing Exception, and a $3 Million Problem In 2018, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop
A few years ago, I got a call from the office manager of a chiropractic clinic in Texas. She was panicking. They'd just
A Receptionist, a Fax Machine, and a $1.5 Million Fine A few years ago, I consulted with a specialty clinic where a front-desk employee
A receptionist at a small orthopedic clinic in Arizona clicked "Reply All" to an email containing 836 patient records. The breach triggered an
A Single Telehealth Claim Triggered a $1.5 Million Investigation A mid-size behavioral health practice in the Southeast thought they had telehealth billing figured out.
A home health agency in Texas got hit with two separate federal investigations in the same quarter — one from OSHA for failing to maintain a
A $4.75 Million Fine That Started With One Missing Document In 2023, OCR settled with Lafourche Medical Group for $480,000 after a phishing
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.