Healthcare Chief Information Security Officer (CISO), Virtual Privacy Officer and HIPAA Compliance Educator and National Speaker on Healthcare Privacy & Security
A pediatric dental practice in Indiana lost $350,000 in a single afternoon. Not from a lawsuit. Not from a cyberattack. From a single OCR
In January 2013, HHS dropped a 563-page regulatory hammer that reshaped every corner of HIPAA compliance. The Omnibus Rule wasn't a minor tweak.
A nurse texts a patient's lab results to a colleague using a personal phone. A receptionist confirms an appointment over the phone to
A home health aide I worked with once told me, "We're too small to be a covered entity." Her agency had
A hospital employee in Texas once looked up her ex-husband's medical records out of curiosity. She didn't change anything. She didn&
A hospital system in New York handed HHS investigators a three-ring binder full of policies during an audit. The binder looked impressive — hundreds of pages,
A Single Stolen Laptop Cost This Health System $3.9 Million In 2018, the University of Rochester Medical Center (URMC) settled with the Office for
A Receptionist, a Sticky Note, and a $1.5 Million Fine A front-desk employee at a specialty clinic jotted down a patient's name,
In 2018, a small dermatology practice in Massachusetts agreed to pay $150,000 to the Office for Civil Rights after a physician threw patient records
In 2017, Presence Health paid $475,000 to the Office for Civil Rights after a single mistake: they waited too long to notify patients about
The Envelope That Ended Up at the Wrong Address A few years ago, a large health plan outsourced its Explanation of Benefits mailings to a
That Stack of Forms Your Front Desk Hands Out? It Might Be Wrong. I once walked into a three-provider medical practice in Georgia and asked
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.