A collection of 170 posts
In 2024, a regional pharmacy chain paid $1.5 million to settle allegations with the HHS Office for Civil Rights after workforce members improperly accessed
When OCR settled with a Florida dental practice for $62,500 in 2023, the root cause wasn't a sophisticated cyberattack or a rogue
In 2023, OCR settled with a Louisiana medical group for $480,000 after a breach investigation revealed the organization had never implemented a workforce training
In 2023, OCR settled with a dental practice in New England for $23,000 after an investigation revealed that not a single member of the
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affected nearly 3 million individuals. The investigation revealed longstanding failures
Every week, OCR receives complaints from patients whose protected health information was mishandled by organizations that believed they were compliant — but had fundamental gaps in
A police officer walks into your emergency department, badge in hand, requesting medical records for a patient involved in a shooting. Your front desk staff
In 2023, OCR settled with a dental practice in New England for $50,000 after an investigation revealed the organization had no written policies, no
In 2023, OCR settled with a dental practice for $50,000 after investigators discovered the organization had failed to provide patients with an adequate notice
Every week, someone contacts me asking for a "hippa waiver form" — and every week, I have to deliver the same corrective message. There
In 2024, OCR settled with a New England dermatology practice for $300,640 after investigators found that protected health information had been disclosed to a
In 2023, OCR settled with a dental practice for $50,000 after investigators discovered the organization had been using an outdated authorization form that failed
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.