A collection of 130 posts
In 2024, OCR settled with a healthcare provider for $40,000 after an investigation revealed that multiple workforce members had never received HIPAA training — despite
In 2023, OCR settled with a dental practice in New England for $50,000 after investigators found the organization had failed to provide patients with
In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed the organization had failed to properly safeguard patient
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had no clear understanding of what data it
In early 2023, a dental practice in Texas received an OCR complaint after a staff member texted appointment reminders containing diagnosis codes to patients who
In 2023, OCR settled with a Florida-based health system for $1.3 million after an investigation revealed that workforce members had been accessing patient records
In 2023, OCR settled a case with a dental management company — not a dentist, not a hospital, but an administrative services firm — for $350,000
A mid-size hospital system in the Midwest allowed its entire billing department unrestricted access to complete patient medical records — including clinical notes, mental health histories,
In 2019, a small cardiology practice in New England received a complaint after a terminated employee reported that patient records were stored in an unlocked
In 2023, a mid-sized hospital in the Southeast faced simultaneous investigations from OSHA and OCR after a needlestick incident exposed a nurse to bloodborne pathogens
In 2023, a mid-sized dermatology practice in Texas received citations from both OSHA and OCR within the same quarter — one for failing to train staff
In 2023, a mid-sized hospital system paid $1.3 million to settle with OCR after a researcher published a dataset they believed was "anonymized&
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.