Business Associates

HIPAA Omnibus Rule

HIPAA Omnibus Rule of 2013: What Still Applies Today

When OCR announced a $4.8 million settlement with New York-Presbyterian Hospital and Columbia University in 2014, it was one of the first major enforcement

HITECH Act

HITECH Regulations: What Covered Entities Must Know

In 2018, MD Anderson Cancer Center lost a $4.3 million appeal over HIPAA violations that hinged on provisions strengthened by the HITECH Act. The

HIPAA Compliance Plan

Sample HIPAA Compliance Plan: Build Yours the Right Way

In 2023, OCR settled with a covered entity for $1.25 million — not because of a sophisticated cyberattack, but because the organization lacked a written,

HIPAA Privacy Rule

Summary of the HIPAA Privacy Rule: What You Must Know

In 2024, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed the organization had no policies implementing the Privacy