HIPAA Compliance Insights

HIPAA Privacy Test

HIPAA Privacy Test: What Your Workforce Must Know

In 2023, OCR settled with a dental practice for $350,000 after an employee disclosed a patient's protected health information on social media.

Carl B. Johnson · Jul 23, 2025

HIPAA Privacy Violation

HIPAA Privacy Violation: What Triggers OCR Enforcement

In February 2024, a small dental practice in New England agreed to a $50,000 settlement with the Office for Civil Rights after a former

Carl B. Johnson · Jul 23, 2025

HIPAA Privacy Violations

HIPAA Privacy Violations: How They Happen and How to Prevent Them

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a hospital employee sold protected health information (PHI) of over

Carl B. Johnson · Jul 23, 2025

Front Desk Training

I Learned Way Too Much About a Patient While Sitting in a Waiting Room

I sat in a waiting room for 30 minutes and learned the names, diagnoses, and insurance details of four strangers. Here's why front desk HIPAA training matters more than you think.

Carl B. Johnson · Jul 17, 2025

HIPAA Private Cause of Action

HIPAA Private Cause of Action: Why Patients Can't Sue

In 2023, a patient in Texas discovered her therapist had disclosed session notes to a family member without authorization. She hired an attorney, filed suit

Carl B. Johnson · Jul 9, 2025

HIPAA Protection Rule

HIPAA Protection Rule: What Your Organization Must Do

In February 2024, OCR announced a $4.75 million settlement with a healthcare system that failed to implement even basic safeguards for protected health information.

Carl B. Johnson · Jul 9, 2025

HIPAA Basics

HIPAA Protects a Category of Information Known as PHI

In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had no clear understanding of what data it

Carl B. Johnson · Jul 9, 2025

HIPAA Record Storage

HIPAA Record Storage Requirements: What You Must Keep

In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed that records containing protected health information were stored

Carl B. Johnson · Jul 4, 2025

HIPAA Records Retention

HIPAA Records Retention Policy: What You Must Keep

In 2023, a mid-sized clinic in the Southeast received a records request from OCR during a compliance review — and couldn't produce its risk

Carl B. Johnson · Jul 4, 2025

HIPAA Patient Rights

HIPAA Regulations Establish a Floor of Patient Rights

When Maryland enacted its strict genetic information privacy law and California expanded patient access rights beyond what federal rules require, many healthcare organizations asked the

Carl B. Johnson · Jul 4, 2025

HIPAA Regulations

HIPAA Regulations for Medical Records Storage Explained

In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed that protected health information stored on a network

Carl B. Johnson · Jul 4, 2025

HIPAA Authorization

HIPAA Release Authorization Form: What Your Organization Must Include

In 2023, OCR investigated a mid-sized specialty clinic that had been using the same patient authorization form since 2009. The form lacked three of the

Carl B. Johnson · Jul 4, 2025