HIPAA Compliance Insights

HITECH Act

HITECH Regulations: What Covered Entities Must Know

In 2018, MD Anderson Cancer Center lost a $4.3 million appeal over HIPAA violations that hinged on provisions strengthened by the HITECH Act. The

Carl B. Johnson · Dec 8, 2020

HIPAA Certification

How Do You Get a HIPAA Certification? A Practical Guide

In early 2024, OCR settled with a healthcare clearinghouse for $1.4 million after an investigation revealed that workforce members had never completed meaningful HIPAA

Carl B. Johnson · Dec 8, 2020

HIPAA Certification

How Long Do HIPAA Certifications Last? What You Need to Know

In 2023, OCR settled with a small dental practice for $50,000 after investigators found that not a single employee had completed HIPAA training in

Carl B. Johnson · Nov 26, 2020

HIPAA Certification

How Long Does It Take to Get HIPAA Certified?

In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had no documented HIPAA training program — despite operating for

Carl B. Johnson · Nov 26, 2020

OSHA Compliance

How to Become OSHA Compliant in Healthcare Settings

In 2023, OSHA issued over $4.3 million in penalties to healthcare facilities for violations ranging from bloodborne pathogen exposure to inadequate hazard communication. What

Carl B. Johnson · Nov 17, 2020

HIPAA Certification

How to Get a HIPAA Certification for Free in 2025

In March 2024, OCR settled with a small medical practice in California for $100,000 after an investigation revealed that not a single employee had

Carl B. Johnson · Nov 17, 2020

HIPAA Certification

How to Obtain HIPAA and OSHA Certification

Every January, OCR publishes a reminder that workforce training failures remain among the top reasons healthcare organizations face enforcement actions. In 2023 alone, multiple settlements

Carl B. Johnson · Nov 17, 2020

How to Protect PHI

How to Protect PHI: A Practical Guide for Covered Entities

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over

Carl B. Johnson · Nov 17, 2020

HIPAA Compliant Email

How to Send HIPAA Compliant Email: A Practical Guide

In 2023, a dental practice in New England paid over $50,000 to settle an OCR investigation triggered by a single unencrypted email containing patient

Carl B. Johnson · Nov 17, 2020

HIPAA Compliance

Importance of HIPAA: Why Compliance Is Non-Negotiable

In February 2024, OCR settled with a healthcare system for $4.75 million after a phishing attack compromised the protected health information of over 100,

Carl B. Johnson · Nov 17, 2020

HIPAA Forms

Medical HIPAA Form Requirements Your Practice Must Follow

In 2023, OCR settled with a dental practice in New England for $23,000 after an investigation revealed, among other violations, that the practice had

Carl B. Johnson · Nov 17, 2020

HIPAA Training

Online OSHA and HIPAA Training: What Healthcare Orgs Need

Why Healthcare Organizations Are Combining OSHA and HIPAA Into One Training Strategy In 2023, OCR settled with a covered entity for $1.3 million after

Carl B. Johnson · Oct 30, 2020