HIPAA
HIPAA in 2026: What Every Covered Entity Must Get Right
A Fax Machine, a $4.75 Million Penalty, and Why HIPAA Still Catches Organizations Off Guard In 2020, a large health system called Premera Blue
Tag
Breach Notification
A collection of 21 posts
HIPAA Rules
HIPAA Rules: What Most Organizations Still Get Wrong
A Single Fax Machine Cost This Hospital $4.8 Million In 2019, a fax at NewYork-Presbyterian Hospital sent a patient's PHI to the
HIPAA Security Incident
HIPAA Security Incident: Response Steps Your Team Needs
In 2023, OCR settled with a Louisiana medical group for $480,000 after a HIPAA security incident involving a stolen unencrypted laptop — an incident the
HIPAA Security Rule
HIPAA Security Incident Definition: What Counts and Why
In 2023, OCR settled with a healthcare system for $1.3 million after investigators found the organization had no process for identifying or responding to
HIPAA Violations
HIPAA Violation Articles: Lessons from Recent OCR Cases
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee sold protected health information of over 12,
HITECH Act
HITECH Act Medical Records: What Your Organization Must Know
When Cignet Health of Maryland refused to provide 41 patients access to their medical records, the Office for Civil Rights (OCR) imposed a $4.3
HIPAA Violations
Violation of HIPAA Cases: Lessons from Recent Enforcement
In February 2023, OCR announced a $1.3 million settlement with Banner Health after a breach affecting nearly 3 million individuals exposed catastrophic failures in
HIPAA Omnibus Rule
What Did the HIPAA Omnibus Rule Do? Key Changes
In January 2013, the Department of Health and Human Services published a final rule that fundamentally reshaped HIPAA enforcement — and many healthcare organizations are still
HIPAA Violations
What Happens If You Violate HIPAA: Penalties Explained
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals exposed systemic failures in
HIPAA
What Is HIPAA and HITECH: A Compliance Guide
In February 2011, a major health system paid $4.3 million to settle with the Office for Civil Rights after stolen laptops exposed the electronic
HITECH Act
What Is HITECH and HIPAA? How These Laws Work Together
When Advocate Medical Group paid $5.55 million to settle HIPAA violations in 2016, the penalty wasn't calculated under the original 1996 HIPAA
Omnibus Rule
What Is the Omnibus Rule? A Practical HIPAA Guide
In January 2013, the Department of Health and Human Services published a rule that fundamentally restructured HIPAA enforcement — and many healthcare organizations are still catching