HIPAA Compliance Insights

Omnibus Rule

What Is the Omnibus Rule? A Practical HIPAA Guide

In January 2013, the Department of Health and Human Services published a rule that fundamentally restructured HIPAA enforcement — and many healthcare organizations are still catching

Carl B. Johnson · Mar 27, 2023

PHI

What Is PHI and What Is Not: A Practical Guide

In 2023, a dental practice in New England received a $50,000 OCR settlement after a workforce member posted a patient's before-and-after photos

Carl B. Johnson · Mar 27, 2023

PHI

What Is PHI in Healthcare? A Compliance Guide

In 2023, OCR settled with a dental practice for $350,000 after it disclosed patient diagnoses in response to negative online reviews. The information shared

Carl B. Johnson · Mar 27, 2023

Protected Health Information

What Is Protected Health Information? Examples Every CE Needs

In 2023, a dental practice in New England paid a $50,000 settlement to the Office for Civil Rights after a workforce member posted a

Carl B. Johnson · Mar 27, 2023

Sensitive Health Information

What Is Sensitive Health Information Under HIPAA?

In 2023, OCR settled with a behavioral health provider for $1.25 million after the organization disclosed substance abuse treatment records without patient authorization. The

Carl B. Johnson · Mar 27, 2023

Anti-Kickback Statute

What Is the Anti-Kickback Statute Designed to Prevent?

In 2023, the Department of Justice recovered over $2.68 billion in settlements and judgments related to healthcare fraud — a significant portion tied to Anti-Kickback

Carl B. Johnson · Feb 18, 2023

HIPAA Basics

What Is the Function of HIPAA? A Practical Guide

In 2023 alone, the HHS Office for Civil Rights (OCR) settled or imposed penalties in dozens of enforcement actions totaling tens of millions of dollars

Carl B. Johnson · Feb 18, 2023

HIPAA Basics

What Is the HIPAA? A Practical Compliance Guide

In February 2023, OCR settled with a dental practice in New England for $23,000 after a patient complaint revealed the organization had no written

Carl B. Johnson · Feb 18, 2023

HIPAA Compliance

What Is the HIPAA Compliance Framework? A Full Guide

In February 2024, OCR announced a $480,000 settlement with a New England dermatology practice that failed to conduct an enterprise-wide risk analysis — a core

Carl B. Johnson · Jan 27, 2023

HIPAA Privacy Rule

What Is the Privacy Rule Responsible for Protecting?

In 2023, OCR settled with Yakima Valley Memorial Hospital for $240,000 after 23 security guards were found snooping through patient medical records without a

Carl B. Johnson · Jan 27, 2023

Anti-Kickback Statute

What Law Prohibits Offering Payment to Induce Referrals

In 2023, the Department of Justice recovered over $2.68 billion in judgments and settlements involving healthcare fraud — a significant portion tied to illegal referral

Carl B. Johnson · Jan 27, 2023

HIPAA Enforcement

What Office Enforces HIPAA and How They Hold You Accountable

In February 2023, the Office for Civil Rights (OCR) announced a $1.3 million settlement with a health plan that failed to provide timely access

Carl B. Johnson · Jan 27, 2023