A collection of 23 posts
A mid-sized cardiology practice in the Southeast migrated their patient records to a popular cloud platform in 2021. They chose a reputable vendor. They assumed
A mid-size orthopedic practice in Connecticut migrated its entire patient scheduling system to the cloud in 2023. Six months later, a workforce member accidentally made
A Single Law Turned HIPAA From a Suggestion Into a Sledgehammer In February 2009, most healthcare organizations treated HIPAA like a dusty policy binder on
A Telehealth Startup's $1.5 Million Wake-Up Call In 2023, a mental health telehealth company called Cerebral agreed to a $7.1 million
A $4.75 Million Cloud Assumption In 2020, a health system executive told me their patient data was "totally secure" because they'
In February 2011, a health plan called Cignet Health of Prince George's County, Maryland received a $4.3 million civil monetary penalty from
A hospital employee in Texas forwarded a patient's lab results to a family member who called and asked nicely. No written authorization. No
A Therapist's Worst Nightmare Started With a Default Password In 2022, a mid-sized behavioral health practice in the Southeast discovered that session notes
The Spreadsheet That Cost a Health System $5.1 Million In 2017, Memorial Healthcare System paid $5.1 million to HHS after employees accessed the
The Vendor That Cost a Health System $4.3 Million In 2016, Advocate Health Care agreed to pay $5.55 million to HHS after multiple
In January 2013, HHS dropped the largest single regulatory update in HIPAA's history — and most organizations still haven't fully absorbed what
A mid-size pediatric health network migrated to a popular cloud platform in 2022. They configured the servers, encrypted the data at rest, and assumed they
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.