Privacy Rule
What Does the Privacy Rule Grant to Patients?
In 2023, OCR settled with a health system for $40,000 after the organization failed to provide a patient timely access to her own medical
Carl B. Johnson
Healthcare Chief Information Security Officer (CISO), Virtual Privacy Officer and HIPAA Compliance Educator and National Speaker on Healthcare Privacy & Security
HIPAA Violations
What Happens If You Violate HIPAA: Penalties Explained
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals exposed systemic failures in
HIPAA Compliance
What Information Is Not Protected by HIPAA
A hospital's HR department shared an employee's sick leave records with a manager, and the employee filed a complaint with the
HIPAA BAA
What Is a HIPAA BAA and Why Your Organization Needs One
In 2023, OCR settled with a health system for $1.25 million after discovering that the organization had allowed a vendor to access protected health
HIPAA Rules
What Is a HIPAA Rule? A Practical Compliance Guide
In 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed critical failures across multiple HIPAA
HIPAA Violation
What Is a Violation of HIPAA? Real Examples and Risks
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affected nearly 3 million patients — the result of insufficient access
HIPAA
What Is HIPAA and HITECH: A Compliance Guide
In February 2011, a major health system paid $4.3 million to settle with the Office for Civil Rights after stolen laptops exposed the electronic
HIPAA Basics
What Is HIPAA and What Is Its Purpose in Healthcare
In 2023, the Office for Civil Rights (OCR) settled or imposed penalties in cases totaling over $4 million — all stemming from organizations that failed to
HIPAA Authorization
What Is HIPAA Authorization at Kaiser: A Practical Guide
In 2024, Kaiser Permanente disclosed that a tracking technology breach potentially exposed the protected health information of 13.4 million individuals — one of the largest
HIPAA HITECH
What Is HIPAA HITECH and Why It Changed Compliance
In February 2011, Massachusetts General Hospital paid $1 million to settle HIPAA violations involving the loss of protected health information for 192 patients. What made
HITECH Act
What Is HIPAA HITECH Act and Why It Changed Enforcement
In February 2011, Cignet Health of Prince George's County, Maryland received a $4.3 million civil money penalty from the Office for Civil
HITECH Act
What Is HITECH and HIPAA? How These Laws Work Together
When Advocate Medical Group paid $5.55 million to settle HIPAA violations in 2016, the penalty wasn't calculated under the original 1996 HIPAA