HIPAA Compliance Insights

Case Studies

How a Non-Profit Trained 3,200 Volunteer Health Workers on HIPAA During the Pandemic

How a non-profit trained 3,200 volunteer community health workers on HIPAA in six weeks during the pandemic using HIPAA Certify's automated platform.

Carl B. Johnson · Sep 8, 2022

HIPAA Compliant Email

Compliant Email: HIPAA Rules for Sending PHI Securely

In 2023, OCR settled with a healthcare provider for over $100,000 after an investigation revealed that staff routinely sent unencrypted emails containing protected health

Carl B. Johnson · Sep 3, 2022

HIPAA Complaints

How to Contact HIPAA: Filing Complaints and Getting Help

In 2023, the Office for Civil Rights (OCR) received over 32,000 complaints alleging HIPAA violations — and resolved the vast majority through investigation, corrective action,

Carl B. Johnson · Sep 3, 2022

Dental HIPAA Training

Dental OSHA and HIPAA Training: What Practices Must Know

In 2023, a small dental practice in North Carolina paid $50,000 to settle a complaint with the Office for Civil Rights after a former

Carl B. Johnson · Sep 3, 2022

EHR and HIPAA Compliance

EHR and HIPAA Compliance: What Your Organization Must Get Right

In 2023, OCR settled with a healthcare system for $1.3 million after an investigation revealed that a former employee had accessed over 2,700

Carl B. Johnson · Sep 3, 2022

Elements of HIPAA

Elements of HIPAA: The Core Rules Every Organization Must Know

In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed systemic failures across multiple

Carl B. Johnson · Sep 3, 2022

Elements of PHI

Elements of PHI: What Qualifies as Protected Health Information

In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had disclosed patient names, treatment records, and Social

Carl B. Johnson · Sep 3, 2022

HIPAA Compliance

Essential Part of HIPAA Compliance Most Organizations Miss

In 2023, OCR settled with a solo dental practice in New England for $30,000—not because of a massive data breach, but because the

Carl B. Johnson · Jul 18, 2022

Fraud Abuse and Waste

Fraud Abuse and Waste in Healthcare: HIPAA's Role

In 2023, the Department of Justice recovered over $2.68 billion in settlements and judgments related to healthcare fraud. Behind nearly every one of those

Carl B. Johnson · Jun 13, 2022

HIPAA Training

Free HIPAA Compliance Training with Certificate: What to Know

In 2023, OCR settled with a dental practice in New England for $50,000 after investigators found that the organization had no documented workforce training

Carl B. Johnson · Jun 13, 2022

G Suite HIPAA

G Suite HIPAA Compliance: What Your Organization Must Do

In 2024, OCR settled a case with a healthcare provider that had been storing patient records in a cloud-based email platform — without a signed Business

Carl B. Johnson · Jun 13, 2022

HIPAA Release Form

Generic HIPAA Release Form: What You Must Know

In 2023, OCR settled with a healthcare provider for $50,000 after determining that the organization had disclosed protected health information using an authorization form

Carl B. Johnson · Jun 13, 2022