HIPAA Compliance Insights

HIPAA Training

HIPAA Employee Training Requirements: What OCR Expects

In 2024, OCR settled with a healthcare provider for $40,000 after an investigation revealed that multiple workforce members had never received HIPAA training — despite

Carl B. Johnson · Nov 1, 2025

HIPAA Fines

HIPAA Fines for Non Compliance: What You Risk in 2024

In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals exposed systemic failures in

Carl B. Johnson · Nov 1, 2025

HIPAA Training

HIPAA for Healthcare Workers Overview Post Test Guide

A hospital system in the Midwest recently terminated three employees after a post-training assessment revealed they could not correctly identify what constitutes protected health information

Carl B. Johnson · Oct 2, 2025

HIPAA General Release Form

HIPAA General Release Form: What Your Organization Must Know

In 2023, a mid-size hospital system in the Southeast received a corrective action mandate from OCR after routinely using an outdated, overly broad release form

Carl B. Johnson · Oct 2, 2025

HIPAA Privacy Rule

HIPAA Gives Privacy Protection For: Who Is Actually Covered

In 2023, OCR settled with a dental practice in New England for $50,000 after a patient filed a complaint that the practice had disclosed

Carl B. Johnson · Oct 2, 2025

HIPAA Goals

HIPAA Goals: The Core Objectives Your Organization Must Meet

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over

Carl B. Johnson · Oct 2, 2025

HIPAA Health

HIPAA Health: How Compliance Protects Patient Care

In February 2024, OCR announced a $4.75 million settlement with a nonprofit health system that failed to conduct an enterprise-wide risk analysis — a failure

Carl B. Johnson · Sep 30, 2025

HIPAA Identifiable Information

HIPAA Identifiable Information: What Qualifies as PHI

In 2023, a dental practice in New England received a six-figure penalty from OCR after posting appointment reminders on a public-facing scheduling platform that exposed

Carl B. Johnson · Sep 30, 2025

HIPAA Importance

HIPAA Importance: Why Compliance Is Non-Negotiable

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over

Carl B. Johnson · Sep 30, 2025

HIPAA in a Nutshell

HIPAA in a Nutshell: What Every Healthcare Org Must Know

In 2023 alone, OCR settled or imposed civil money penalties in cases totaling over $4 million — and the majority involved failures that any organization with

Carl B. Johnson · Sep 30, 2025

HIPAA Compliance

HIPAA in Health Care: What Every Organization Must Know

In February 2024, OCR announced a $4.75 million settlement with a hospital system that failed to conduct an enterprise-wide risk analysis — a requirement that

Carl B. Johnson · Sep 30, 2025

HIPAA Basics

HIPAA Is Also Referred to as the Kennedy-Kassebaum Act

When OCR issues a corrective action plan or levies a six-figure penalty, the enforcement letter doesn't reference some obscure regulation — it cites the

Carl B. Johnson · Sep 30, 2025