HIPAA requirements and training for business associates and third-party service providers
A managed IT company in Tennessee gets hit with a $2.3 million settlement from HHS because a hospital never signed a business associate agreement
The $4.3 Million Mistake That Started With a Vendor Contract In 2016, Advocate Medical Group paid $5.55 million to settle HIPAA violations — and
The Missing Signature That Cost a Health System $4.3 Million In 2016, Advocate Health Care Network settled with the Office for Civil Rights (OCR)
A medical billing company in Tennessee exposed the records of 300,000 patients — and the hospital that hired them paid the price. Not because the
A $5.1 Million Penalty That Started with a Simple Question In 2017, Memorial Healthcare System in Florida agreed to pay $5.1 million to
If you handle patient information for healthcare clients, HIPAA training isn't optional—it's legally required. But it's also your ticket into a lucrative, growing market that most VAs can't access.
In 2023, OCR settled with a dental practice in New England that had never conducted a risk analysis, never issued a Notice of Privacy Practices,
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals exposed systemic failures in
In February 2024, OCR announced a $4.75 million settlement with a major healthcare system that failed to provide patients timely access to their medical
The Downstream Liability Most Business Associates Overlook In 2023, OCR settled with a medical transcription company for over $100,000 after a breach traced not
In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had been disclosing patient records to a third-party marketing
In 2024, OCR settled with a New England dermatology practice for $300,000 after discovering that protected health information had been disclosed to a vendor
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.