HIPAA Compliance Insights

Hospital Compliance Training

Hospital Compliance Training: What OCR Expects

In February 2024, OCR settled with a large health system for $480,000 after investigators found that the organization had failed to provide adequate HIPAA

Carl B. Johnson · Oct 29, 2024

HIPAA Compliance

What Does HIPAA Stand For? Understanding HIPAA Meaning and Why It Matters in Healthcare

HIPAA stands for the Health Insurance Portability and Accountability Act of 1996. Understanding the full HIPAA meaning requires examining how this federal law shapes healthcare operations, privacy requirements, and compliance obligations.

Carl B. Johnson · Sep 12, 2024

Fraud Waste and Abuse

How Can You Prevent Fraud Waste and Abuse Under HIPAA

In 2023, the Department of Health and Human Services Office of Inspector General (OIG) reported over $3.6 billion in expected recoveries from healthcare fraud

Carl B. Johnson · Sep 7, 2024

HIPAA Patient Identifiers

How Many Patient Identifiers Are Required by HIPAA

A behavioral health clinic in Connecticut received a $125,000 penalty from OCR after disclosing a spreadsheet of patient data that staff believed was "

Carl B. Johnson · Jul 7, 2024

Bloodborne Pathogens Training

How Often Must Bloodborne Pathogens Training Be Provided

In 2023, OSHA cited a mid-sized dental practice in Ohio for failing to retrain clinical staff on bloodborne pathogens after a needlestick incident exposed three

Carl B. Johnson · Jul 7, 2024

HIPAA Forms

How to Fill Out a HIPAA Form: A Practical Guide

In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization was routinely using deficient authorization forms that failed

Carl B. Johnson · Jul 7, 2024

Patient Identifiers

Information That Contains One or More Patient Identifiers

Why a Single Patient Identifier Triggers Full HIPAA Protection In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation

Carl B. Johnson · Jun 18, 2024

Anti Kickback Statute

Intent of Anti Kickback Statute and HIPAA Compliance

In 2023, the Department of Justice recovered over $2.68 billion in healthcare fraud settlements and judgments — a significant portion tied to Anti-Kickback Statute (AKS)

Carl B. Johnson · Jun 18, 2024

HIPAA Email

Is Email PHI? What HIPAA Actually Requires for Email

In December 2023, OCR settled with a healthcare system for $480,000 after an investigation revealed workforce members had been emailing unencrypted patient information to

Carl B. Johnson · Jun 18, 2024

HIPAA Compliance

Is Google Hangouts HIPAA Compliant? What You Must Know

In early 2023, a small behavioral health practice in the Midwest contacted me after receiving a patient complaint. A clinician had been conducting therapy sessions

Carl B. Johnson · Jun 18, 2024

HIPAA Compliance

Is HIPAA Only for Medical Professionals? Not Even Close

In 2023, OCR settled a case with a dental management company — not a dentist, not a hospital, but an administrative services firm — for $350,000

Carl B. Johnson · Jun 18, 2024

HIPAA Basics

Is HIPPA the Right Spelling? Understanding HIPAA

OCR investigators don't grade your spelling — but if your compliance policies, workforce training materials, or Notice of Privacy Practices consistently reference "HIPPA&

Carl B. Johnson · Jun 18, 2024