HIPAA Compliance Insights

HIPAA Privacy Regulations

HIPAA Privacy Regulations: What Covered Entities Miss

In February 2024, OCR settled with a healthcare provider for $480,000 after an investigation revealed systemic failures to comply with the HIPAA Privacy Rule

Carl B. Johnson · Sep 13, 2025

Case Studies

How a 250-Bed Georgia Hospital Trained Their Entire Workforce on HIPAA in Under 30 Days

How a 250-bed Georgia hospital used HIPAA Certify to train 1,847 employees across multiple locations in just 27 days—from implementation to full compliance.

Carl B. Johnson · Sep 1, 2025

HIPAA Privacy Rule

HIPAA Privacy Rule Compliance: What OCR Expects

In February 2024, OCR announced a $4.75 million settlement with a major healthcare system that failed to provide patients timely access to their medical

Carl B. Johnson · Jul 23, 2025

HIPAA Privacy Rule

HIPAA Privacy Rules Include PHI Such As These 18 Identifiers

In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed the organization had failed to properly safeguard patient

Carl B. Johnson · Jul 23, 2025

HIPAA Privacy Test

HIPAA Privacy Test: What Your Workforce Must Know

In 2023, OCR settled with a dental practice for $350,000 after an employee disclosed a patient's protected health information on social media.

Carl B. Johnson · Jul 23, 2025

HIPAA Privacy Violation

HIPAA Privacy Violation: What Triggers OCR Enforcement

In February 2024, a small dental practice in New England agreed to a $50,000 settlement with the Office for Civil Rights after a former

Carl B. Johnson · Jul 23, 2025

HIPAA Privacy Violations

HIPAA Privacy Violations: How They Happen and How to Prevent Them

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a hospital employee sold protected health information (PHI) of over

Carl B. Johnson · Jul 23, 2025

Front Desk Training

I Learned Way Too Much About a Patient While Sitting in a Waiting Room

I sat in a waiting room for 30 minutes and learned the names, diagnoses, and insurance details of four strangers. Here's why front desk HIPAA training matters more than you think.

Carl B. Johnson · Jul 17, 2025

HIPAA Private Cause of Action

HIPAA Private Cause of Action: Why Patients Can't Sue

In 2023, a patient in Texas discovered her therapist had disclosed session notes to a family member without authorization. She hired an attorney, filed suit

Carl B. Johnson · Jul 9, 2025

HIPAA Protection Rule

HIPAA Protection Rule: What Your Organization Must Do

In February 2024, OCR announced a $4.75 million settlement with a healthcare system that failed to implement even basic safeguards for protected health information.

Carl B. Johnson · Jul 9, 2025

HIPAA Basics

HIPAA Protects a Category of Information Known as PHI

In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had no clear understanding of what data it

Carl B. Johnson · Jul 9, 2025

HIPAA Record Storage

HIPAA Record Storage Requirements: What You Must Keep

In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed that records containing protected health information were stored

Carl B. Johnson · Jul 4, 2025