5 Rules of HIPAA: What Every Covered Entity Must Know
In 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed failures across multiple HIPAA requirements
A collection of 202 posts
In 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed failures across multiple HIPAA requirements
When OCR settled with Anthem Inc. for $16 million in 2018 — the largest HIPAA settlement in history at that time — the enforcement action didn'
In February 2024, OCR settled with a healthcare system for $480,000 after investigators found that workforce members had never completed HIPAA training — despite handling
When OCR investigated a small dental practice in 2023 for an impermissible disclosure of protected health information, the first document they requested was proof of
In 2023, OCR settled with a covered entity for $1.3 million after investigators discovered that workforce members had never received adequate HIPAA training — despite
In 2023, the Office for Civil Rights (OCR) received over 32,000 complaints alleging HIPAA violations — and resolved the vast majority through investigation, corrective action,
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had disclosed patient names, treatment records, and Social
In 2023, the Department of Justice recovered over $2.68 billion in settlements and judgments related to healthcare fraud. Behind nearly every one of those
In 2023, OCR settled with a healthcare provider for $50,000 after determining that the organization had disclosed protected health information using an authorization form
When OCR investigated a small medical practice in 2023 for storing patient records in a consumer Gmail account without a Business Associate Agreement, the practice
When a Texas-based hospital system was fined by the state attorney general for failing to train its workforce on state-specific privacy requirements, the organization'
In 2023, a mid-size health plan received a corrective action from OCR after an investigation revealed that staff responsible for processing electronic claims had never
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.