Who Regulates HIPAA
Who Regulates HIPAA? The Agencies Behind Enforcement
A Single Complaint to the Wrong Agency Can Cost You Months I got a call last year from a clinic administrator who had filed a
Tag
Covered Entities
A collection of 42 posts
HIPAA Violation
Definition of HIPAA Violation: What Actually Counts
A hospital employee in Texas looks up her ex-husband's medical records out of curiosity. A dental office in Georgia tosses paper charts into
HIPAA Basics
What Does HIPAA Stand For? More Than You Think
A front desk receptionist at a dermatology clinic in Phoenix once told a patient's employer — over the phone — that the patient had been
HIPAA Privacy Rule
The HIPAA Privacy Rule Applies to Which of the Following?
A Question That Gets People Fired Last year, I consulted with a medical billing company whose CEO genuinely believed HIPAA didn't apply to
HIPAA Meaning
HIPAA Meaning: What It Actually Requires in 2026
A hospital in Oklahoma City paid $1.19 million to HHS in 2023 because an employee snooped through patient records without authorization. The organization knew
HIPAA Violation Fines
HIPAA Violation Fines: What They Cost in 2026
A $4.75 Million Invoice Nobody Expected In 2022, a cancer care center in Indiana opened an envelope from HHS that changed everything. The Centers
HIPAA Security Rule
The HIPAA Security Rule Applies to Which of the Following?
A community hospital in Yakima, Washington lost an unencrypted laptop in 2013. That single device held the electronic protected health information of 524 patients. The
HIPAA Rules
HIPAA Rules: What Most Organizations Still Get Wrong
A Single Fax Machine Cost This Hospital $4.8 Million In 2019, a fax at NewYork-Presbyterian Hospital sent a patient's PHI to the
HIPAA Training
HIPAA Employee Training Requirements: What OCR Expects
In 2024, OCR settled with a healthcare provider for $40,000 after an investigation revealed that multiple workforce members had never received HIPAA training — despite
HIPAA Privacy Forms
HIPAA Privacy Forms for Patients: What You Must Include
In 2023, OCR settled with a dental practice in New England for $50,000 after investigators found the organization had failed to provide patients with
HIPAA Privacy Rule
HIPAA Privacy Rules Include PHI Such As These 18 Identifiers
In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed the organization had failed to properly safeguard patient
HIPAA Basics
HIPAA Protects a Category of Information Known as PHI
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had no clear understanding of what data it