A collection of 169 posts
In 2011, a small physician practice in the Midwest received a patient's written request for an accounting of disclosures. The office manager had
In 2019, OCR launched its HIPAA Right of Access Initiative — and since then, it has settled more than 45 enforcement actions specifically targeting organizations that
When OCR settled with Premera Blue Cross for $6.85 million in 2020, the enforcement action didn't hinge on a single failure. Investigators
In early 2024, a small behavioral health clinic in the Midwest received a $50,000 OCR civil money penalty after a breach investigation revealed that
In 2023, a small dental practice in Texas received a $50,000 penalty from the Office for Civil Rights after a workforce member disclosed protected
OCR's $4.75 Million Settlement Exposed a Training Failure In 2022, OCR settled with a major health system for $4.75 million after
In 2023, OCR investigated a mid-size hospital that released a patient's psychiatric records to a caller who identified herself as the patient'
In October 2023, OCR settled with a healthcare system in Louisiana for $480,000 after a phishing attack compromised the protected health information of over
In 2022, a hospital nurse in New York was terminated and reported to OCR after posting a photo of a busy emergency room on Instagram
In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had been disclosing patient records to a third-party marketing
Every week, healthcare administrators search for "hipp certification" expecting to find a single credential that makes their organization HIPAA-compliant. The reality is more
In late 2023, a large health system deployed a generative AI chatbot to assist clinical staff with documentation. Within weeks, workforce members were pasting entire
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.