Omnibus Rule
The Primary Purpose of the Omnibus Rule Is To
In January 2013, HHS dropped a 563-page regulatory hammer that reshaped every corner of HIPAA compliance. The Omnibus Rule wasn't a minor tweak.
Tag
Breach Notification Rule
A collection of 29 posts
HITECH Act
The HITECH Act: What It Actually Changed About HIPAA
In February 2011, a health plan called Cignet Health of Prince George's County, Maryland received a $4.3 million civil monetary penalty from
HIPAA HITECH Act
What Is the HIPAA HITECH Act? A Practical Guide
A $5.55 Million Wake-Up Call That Rewrote the Rules In 2017, Memorial Healthcare System paid $5.55 million to settle HIPAA violations after employees
HIPAA Omnibus Rule
HIPAA Omnibus Rule: What It Changed and Why It Matters
In January 2013, HHS dropped the largest single regulatory update in HIPAA's history — and most organizations still haven't fully absorbed what
HIPAA Breach
Definition of HIPAA Breach: What Actually Triggers One
A receptionist at a pediatric clinic prints a patient's immunization record and accidentally leaves it on the front counter for forty-five minutes. A
HIPAA Rules
What Are the 3 Rules of HIPAA? A Plain-English Guide
A small dermatology practice in Connecticut thought they had HIPAA covered. They had a privacy notice on their website and a shredder in the back
HIPAA Breach
Definition of HIPAA Breach: What Actually Triggers One
A Stolen Laptop, a Missing Exception, and a $3 Million Problem In 2018, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop
PHI Breach Reporting
When Must PHI-Related Breaches Be Reported? Deadlines
A Hospital Waited 101 Days. It Cost Them $4.8 Million. In 2019, Presence Health agreed to a $475,000 settlement with the Office for
HIPAA in a Nutshell
HIPAA in a Nutshell: What Every Healthcare Org Must Know
In 2023 alone, OCR settled or imposed civil money penalties in cases totaling over $4 million — and the majority involved failures that any organization with
HIPAA Omnibus Final Rule
HIPAA Omnibus Final Rule: What It Changed and Why It Still Matters
When OCR announced a $4.8 million settlement with New York-Presbyterian Hospital and Columbia University in 2014, the enforcement action underscored a regulatory landscape that
HIPAA Violation Penalty
HIPAA Violation Penalty Tiers Explained for 2024
In October 2023, OCR settled with a healthcare system in Louisiana for $480,000 after a phishing attack compromised the protected health information of over
HITECH Act
HITECH Act Summary: What Covered Entities Must Know
When OCR levied a $4.3 million settlement against MD Anderson Cancer Center in 2018 for unencrypted devices containing protected health information, the enforcement authority