A collection of 169 posts
A mid-size behavioral health practice in the Southeast received a subpoena demanding the complete treatment records of a current patient involved in a custody dispute.
When a major Texas health system paid $1.6 million in state penalties for unauthorized disclosures of protected health information, it wasn't a
In 2023, the Department of Justice recovered over $2.68 billion in settlements and judgments related to healthcare fraud — and a significant portion of those
If you've encountered the question "the blank describes how PHI may be used" in a HIPAA training module or certification exam,
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR determined that three data breaches involving unencrypted
In 2022, OCR settled with a dental practice for $25,000 after an investigation revealed the organization had disclosed an entire patient medical record to
In February 2024, OCR settled with a New England dermatology practice for $300,640 after investigators found the organization had no policies implementing basic Privacy
In 2023, OCR investigated a mid-size hospital that suffered a breach traceable to a volunteer who accessed patient records without authorization. The hospital argued the
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had disclosed patient records without authorization — in part
In 2023, OCR settled with a major health plan for $1.3 million after an investigation revealed the plan had used enrollee protected health information
In 2023, OCR settled with a covered entity for over $1.2 million after an investigation revealed that workforce members routinely accessed full patient records
In 2022, CMS reported over $12.59 billion in payments from drug and device manufacturers to physicians and teaching hospitals through the Open Payments database
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.