HIPAA Compliance Insights

HIPAA Nurse Violations

HIPAA Nurse Violations: Real Cases and How to Prevent Them

In 2023, a Texas hospital reported a breach after a nurse accessed the medical records of a coworker's ex-spouse out of curiosity — not

Carl B. Johnson · Sep 29, 2025

HIPAA Omnibus Final Rule

HIPAA Omnibus Final Rule: What It Changed and Why It Still Matters

When OCR announced a $4.8 million settlement with New York-Presbyterian Hospital and Columbia University in 2014, the enforcement action underscored a regulatory landscape that

Carl B. Johnson · Sep 13, 2025

HIPAA Online

HIPAA Online: How Digital Compliance Has Changed

In February 2024, OCR settled with a healthcare provider for $480,000 after an investigation revealed that their online patient portal lacked basic encryption safeguards

Carl B. Johnson · Sep 13, 2025

HIPAA Policy Template

HIPAA Policy Template: What OCR Actually Expects

In 2023, OCR settled with a dental practice in New England for $350,000 — not because of a massive data breach, but because the organization

Carl B. Johnson · Sep 13, 2025

HIPAA Privacy Rule

HIPAA Privacy and Security Rule: What Your Organization Must Know

In February 2024, OCR settled with a healthcare system for $4.75 million after investigators found the organization had failed to conduct an enterprise-wide risk

Carl B. Johnson · Sep 13, 2025

HIPAA Privacy Authorization

HIPAA Privacy Authorization: What Your Forms Must Include

In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization disclosed protected health information to a reporter's

Carl B. Johnson · Sep 13, 2025

HIPAA Privacy Forms

HIPAA Privacy Forms: What Your Organization Must Get Right

In 2023, OCR settled with a dental practice in New England for $50,000 after investigators discovered the organization had failed to provide patients with

Carl B. Johnson · Sep 13, 2025

HIPAA Privacy Forms

HIPAA Privacy Forms for Patients: What You Must Include

In 2023, OCR settled with a dental practice in New England for $50,000 after investigators found the organization had failed to provide patients with

Carl B. Johnson · Sep 13, 2025

HIPAA Privacy Regulations

HIPAA Privacy Regulations: What Covered Entities Miss

In February 2024, OCR settled with a healthcare provider for $480,000 after an investigation revealed systemic failures to comply with the HIPAA Privacy Rule

Carl B. Johnson · Sep 13, 2025

Case Studies

How a 250-Bed Georgia Hospital Trained Their Entire Workforce on HIPAA in Under 30 Days

How a 250-bed Georgia hospital used HIPAA Certify to train 1,847 employees across multiple locations in just 27 days—from implementation to full compliance.

Carl B. Johnson · Sep 1, 2025

HIPAA Privacy Rule

HIPAA Privacy Rule Compliance: What OCR Expects

In February 2024, OCR announced a $4.75 million settlement with a major healthcare system that failed to provide patients timely access to their medical

Carl B. Johnson · Jul 23, 2025

HIPAA Privacy Rule

HIPAA Privacy Rules Include PHI Such As These 18 Identifiers

In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed the organization had failed to properly safeguard patient

Carl B. Johnson · Jul 23, 2025