PHI Training
PHI Training: What Your Workforce Must Know in 2025
In February 2024, OCR settled with a dental practice for $70,000 after an employee disclosed a patient's treatment information on social media.
Tag
Covered Entity
A collection of 192 posts
Privacy Law Healthcare
Privacy Law Healthcare: What Covered Entities Must Know
In February 2024, OCR settled with a Louisiana medical group for $480,000 after determining that the organization had failed to provide patients timely access
Protected Health Information
Protected Health Information Under HIPAA: What Counts
In February 2024, a dental practice in New England received a $50,000 penalty from the HHS Office for Civil Rights after an employee texted
Risk Analysis
Risk Analysis HIPAA: The Requirement That Drives Most Fines
When OCR settled with Banner Health for $1.25 million in 2023, the core finding was painfully familiar: the organization had failed to conduct an
HIPAA Privacy Rule
Summary of the HIPAA Privacy Rule: What You Must Know
In 2024, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed the organization had no policies implementing the Privacy
Sunshine Act
Sunshine Act and HIPAA: What Covered Entities Must Know
In 2023, CMS published over 12.9 billion dollars in physician payment data through the Open Payments database — the public-facing arm of the Sunshine Act.
HIPAA Privacy Rule
What Are HIPAA Privacy Rules? A Practical Guide
In February 2024, OCR settled with a Louisiana medical group for $480,000 after the office failed to provide a patient timely access to her
Protected Health Information
What Info Is Protected by HIPAA: A Practical Guide
In 2023, OCR settled with a dental practice in New England for $23,000 after an investigation revealed the organization had disclosed patient appointment information
Protected Health Information
What Is HIPAA Protected Health Information (PHI)?
In 2023, OCR settled with a dental practice for $350,000 after the organization disclosed patient records to a third-party marketing firm without authorization — largely
HIPAA Authorization
What Is HIPAA Authorization? A Compliance Guide
In 2023, a specialty clinic in the Southeast agreed to a six-figure settlement with OCR after routinely disclosing patient records to a marketing firm — without
HIPAA Training
What Is HIPPA Training? The Correct Term and What It Requires
Every week, I see healthcare professionals searching for what is HIPPA training — and the first thing to address is the spelling. The law is actually
HIPAA Privacy Rule
What Is the HIPAA Privacy Rule? A Practical Guide
In 2023, OCR settled with a dental practice for $350,000 after it disclosed a patient's protected health information to a media outlet