A collection of 47 posts
In 2018, a medical records company called Advanced Care Hospitalists paid $500,000 to settle HIPAA violations after a billing services contractor gained access to
A billing company in Tennessee lost $2.3 million because its leadership believed HIPAA was a hospital problem, not theirs. CHSPSC LLC, a management company
The $4.3 Million Mistake That Started With One Wrong Assumption In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices
A personal trainer once told me she couldn't share a client's weight-loss results on Instagram because of HIPAA. A landlord told
A cloud storage vendor loses a laptop containing 20,000 patient records. The hospital that hired them gets the breach notification letter. The vendor insists
A gym owner in Texas once told me, straight-faced, that his business was HIPAA exempt because he wasn't a doctor. He collected health
The Question That Catches Most Compliance Officers Off Guard A hospital system I worked with had 14,000 employees. Their HIPAA training program covered about
A Question That Gets People Fired Last year, I consulted with a medical billing company whose CEO genuinely believed HIPAA didn't apply to
A $5.1 Million Mistake Started with One Wrong Assumption In 2017, Memorial Healthcare System paid $5.1 million to settle with the Office for
A community hospital in Yakima, Washington lost an unencrypted laptop in 2013. That single device held the electronic protected health information of 524 patients. The
In February 2024, OCR settled with a healthcare provider for $480,000 after an investigation revealed that their online patient portal lacked basic encryption safeguards
In February 2024, OCR settled with a healthcare provider for $480,000 after an investigation revealed systemic failures to comply with the HIPAA Privacy Rule
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.