HIPAA Compliance Insights

HIPAA Rules

Three Primary Rules of HIPAA: What Your Organization Must Know

In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed failures across multiple HIPAA

Carl B. Johnson · Jul 1, 2023

HIPAA Training

Training Requirements Include Volunteers Under the Direction of an Entity

In 2023, OCR investigated a mid-size hospital that suffered a breach traceable to a volunteer who accessed patient records without authorization. The hospital argued the

Carl B. Johnson · Jul 1, 2023

HIPAA Violations

Types of HIPAA Violations: A Breakdown for 2024

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a workforce member stole the protected health information of over

Carl B. Johnson · Jul 1, 2023

PHI

Under HIPAA Law What Is the Best Description of PHI

In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had disclosed patient records without authorization — in part

Carl B. Johnson · Jul 1, 2023

HIPAA Payers

Under HIPAA Payers May Not Misuse PHI: Key Rules

In 2023, OCR settled with a major health plan for $1.3 million after an investigation revealed the plan had used enrollee protected health information

Carl B. Johnson · Jul 1, 2023

Minimum Necessary Rule

Under HIPAA What Is the Minimum Necessary Rule?

In 2023, OCR settled with a covered entity for over $1.2 million after an investigation revealed that workforce members routinely accessed full patient records

Carl B. Johnson · Jul 1, 2023

US Sunshine Act

US Sunshine Act: What HIPAA Professionals Must Know

In 2022, CMS reported over $12.59 billion in payments from drug and device manufacturers to physicians and teaching hospitals through the Open Payments database

Carl B. Johnson · Jul 1, 2023

HIPAA Violations

Violating HIPAA Consequences: What Your Organization Risks

In February 2023, OCR announced a $1.3 million settlement with Banner Health after a data breach affecting nearly 3 million individuals. The root cause

Carl B. Johnson · Jul 1, 2023

HIPAA Violations

Violation of HIPAA Cases: Lessons from Recent Enforcement

In February 2023, OCR announced a $1.3 million settlement with Banner Health after a breach affecting nearly 3 million individuals exposed catastrophic failures in

Carl B. Johnson · Jul 1, 2023

HIPAA Rights

Violation of HIPAA Rights: What Patients Can Do

In 2023, a dental practice in New England paid a $50,000 settlement to OCR after a patient filed a complaint alleging the practice refused

Carl B. Johnson · Jun 19, 2023

HIPAA Violations

Violation of HIPAA Laws: What Triggers Enforcement

In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed systemic failures in risk

Carl B. Johnson · Jun 19, 2023

HIPAA Violations

What Are Examples of HIPAA Violations? Real Cases

In February 2023, OCR announced a $1.3 million settlement with Banner Health after a hacking incident exposed the protected health information of nearly 3

Carl B. Johnson · Jun 19, 2023