Rules of HIPAA: What Every Covered Entity Must Know
A $4.3 Million Penalty That Started with One Missing Rule In 2016, Advocate Health Care Network paid $5.55 million to settle HIPAA violations
A collection of 34 posts
A $4.3 Million Penalty That Started with One Missing Rule In 2016, Advocate Health Care Network paid $5.55 million to settle HIPAA violations
A Single Law Turned HIPAA From a Suggestion Into a Sledgehammer In February 2009, most healthcare organizations treated HIPAA like a dusty policy binder on
A small dermatology practice in Massachusetts lost an unencrypted thumb drive in 2019. It contained the ePHI of 2,200 patients. When HHS investigated, they
A hospital employee in Texas looks up her ex-husband's medical records after a bitter custody dispute. A small clinic in Georgia stores patient
In 2018, a Texas cancer center paid $4.3 million to HHS after two unencrypted devices containing ePHI went missing. The root cause wasn'
In January 2013, HHS dropped a 563-page regulatory hammer that reshaped every corner of HIPAA compliance. The Omnibus Rule wasn't a minor tweak.
In February 2011, a health plan called Cignet Health of Prince George's County, Maryland received a $4.3 million civil monetary penalty from
A $5.55 Million Wake-Up Call That Rewrote the Rules In 2017, Memorial Healthcare System paid $5.55 million to settle HIPAA violations after employees
In January 2013, HHS dropped the largest single regulatory update in HIPAA's history — and most organizations still haven't fully absorbed what
A receptionist at a pediatric clinic prints a patient's immunization record and accidentally leaves it on the front counter for forty-five minutes. A
A small dermatology practice in Connecticut thought they had HIPAA covered. They had a privacy notice on their website and a shredder in the back
A Stolen Laptop, a Missing Exception, and a $3 Million Problem In 2018, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.