A collection of 43 posts
A solo chiropractor in New England assumed HIPAA didn't apply to her practice. She had fewer than ten employees, no electronic health records
A therapist in private practice once told me she didn't think HIPAA applied to her because she wasn't a hospital. A
A home health aide in Georgia texts a photo of a patient's wound to a family member — using her personal phone, over an
A medical billing company in Tennessee assumed the HIPAA Security Rule didn't apply to them. They weren't a hospital. They weren&
A $4.3 Million Penalty — Because They Didn't Think They Were a CE In 2014, New York Presbyterian Hospital and Columbia University collectively
In January 2013, HHS dropped a 563-page regulatory hammer that reshaped every corner of HIPAA compliance. The Omnibus Rule wasn't a minor tweak.
A mental health counselor in private practice once told me she didn't need to worry about HIPAA because she wasn't a
The Vendor That Cost a Health System $4.3 Million In 2016, Advocate Health Care agreed to pay $5.55 million to HHS after multiple
In 2018, a medical records company called Advanced Care Hospitalists paid $500,000 to settle HIPAA violations after a billing services contractor gained access to
A billing company in Tennessee lost $2.3 million because its leadership believed HIPAA was a hospital problem, not theirs. CHSPSC LLC, a management company
The $4.3 Million Mistake That Started With One Wrong Assumption In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices
A personal trainer once told me she couldn't share a client's weight-loss results on Instagram because of HIPAA. A landlord told
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.