HIPAA Compliance Insights

HIPAA Violations

HIPAA Violation Articles: Lessons from Recent OCR Cases

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee sold protected health information of over 12,

Carl B. Johnson · Feb 6, 2025

HIPAA Violation

HIPAA Violation in Healthcare: What Triggers OCR Action

In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million patients. The root cause wasn'

Carl B. Johnson · Jan 27, 2025

HIPAA Violation Penalty

HIPAA Violation Penalty Tiers Explained for 2024

In October 2023, OCR settled with a healthcare system in Louisiana for $480,000 after a phishing attack compromised the protected health information of over

Carl B. Johnson · Jan 27, 2025

HIPAA Violations

HIPAA Violations and Social Media: A Growing Risk

In 2022, a hospital nurse in New York was terminated and reported to OCR after posting a photo of a busy emergency room on Instagram

Carl B. Johnson · Nov 26, 2024

HIPAA Violations

HIPAA Violations List: The Most Common Failures in 2024

In February 2024, OCR settled with a healthcare provider for $4.75 million after an investigation revealed systemic failures across nearly every major HIPAA requirement

Carl B. Johnson · Nov 26, 2024

HIPAA Privacy Rule

HIPAA's Privacy Rule: What Your Organization Gets Wrong

In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had been disclosing patient records to a third-party marketing

Carl B. Johnson · Nov 26, 2024

HIPAA Compliance

HIPAA-Compliant Storage Requirements for Paper Records

In March 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed that the organization had been disposing of

Carl B. Johnson · Nov 26, 2024

HIPP Certification

HIPP Certification: What It Really Means for HIPAA

Every week, healthcare administrators search for "hipp certification" expecting to find a single credential that makes their organization HIPAA-compliant. The reality is more

Carl B. Johnson · Nov 26, 2024

HIPAA Agreement

HIPAA Agreement Requirements Every Organization Must Follow

In 2024, OCR settled with a New England dermatology practice for $300,000 after discovering that protected health information had been disclosed to a vendor

Carl B. Johnson · Nov 26, 2024

HIPAA and AI

HIPAA and AI: What Covered Entities Must Know Now

In late 2023, a large health system deployed a generative AI chatbot to assist clinical staff with documentation. Within weeks, workforce members were pasting entire

Carl B. Johnson · Nov 15, 2024

HIPAA Training

HIPPA Class: What You Actually Need for Compliance

Every week, thousands of healthcare workers search for a HIPPA class — and right away, there's a problem. The correct acronym is HIPAA: the

Carl B. Johnson · Nov 15, 2024

HIPAA Training

HIPPA Compliance Training for Employees: What's Required

In 2023, OCR settled with a Florida-based health system for $1.3 million after an investigation revealed that workforce members had been accessing patient records

Carl B. Johnson · Nov 15, 2024