Patient Rights
What Are the Six Patient Rights Under the Privacy Rule
In 2023, OCR settled with a dental practice in New England for $50,000 after it failed to provide a patient with a copy of
Tag
Covered Entity
A collection of 169 posts
HIPAA Laws
What Do HIPAA Laws Protect? A Compliance Guide
In February 2024, OCR settled with a Louisiana medical group for $480,000 after a phishing attack exposed the protected health information of over 34,
PHI
What Do the Letters PHI Stand For in HIPAA?
In 2023, OCR settled with a dental practice in New England for $50,000 after an investigation revealed that front-desk staff had been disclosing patient
HIPAA Basics
What Does HIPAA Mean? A Compliance Expert Explains
In 2024, OCR settled a HIPAA enforcement case with Montefiore Medical Center for $4.75 million after a workforce member stole protected health information on
Minimum Necessary Standard
What Does It Mean to Follow the Minimum Necessary Standard
In 2022, a specialty clinic in the Midwest disclosed an entire patient record — surgical history, psychiatric notes, billing details — to an employer conducting a routine
Privacy Rule
What Does the Privacy Rule Grant to Patients?
In 2023, OCR settled with a health system for $40,000 after the organization failed to provide a patient timely access to her own medical
HIPAA Compliance
What Information Is Not Protected by HIPAA
A hospital's HR department shared an employee's sick leave records with a manager, and the employee filed a complaint with the
HIPAA Authorization
What Is HIPAA Authorization at Kaiser: A Practical Guide
In 2024, Kaiser Permanente disclosed that a tracking technology breach potentially exposed the protected health information of 13.4 million individuals — one of the largest
Medical Release Form
What Is a Medical Release Form Under HIPAA Rules
In 2023, OCR settled with a New England dermatology practice for $300,640 after it disclosed a patient's protected health information to a
Notice of Privacy Practices
What Is Notice of Privacy Practices Under HIPAA?
In 2022, a small dental practice in the Southeast received a corrective action letter from the Office for Civil Rights (OCR) after a patient complaint
PHI
What Is PHI and What Is Not: A Practical Guide
In 2023, a dental practice in New England received a $50,000 OCR settlement after a workforce member posted a patient's before-and-after photos
PHI
What Is PHI in Healthcare? A Compliance Guide
In 2023, OCR settled with a dental practice for $350,000 after it disclosed patient diagnoses in response to negative online reviews. The information shared