Healthcare regulatory compliance guidance, strategies, and industry insights
A $4.3 Million Fine Started with a Missing Definition In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices containing
Last year, a practice manager in Ohio told me she'd had her entire staff complete an online HIPAA certification she found through a
A single missing risk assessment cost Premera Blue Cross $6.85 million in 2020. Not a breach of millions of records — though that happened too.
A receptionist at a dermatology clinic in New England forwarded a spreadsheet of 1,800 patient names and insurance IDs to her personal Gmail account.
A 340-bed hospital in Idaho downloaded a set of HIPAA sample policies from the internet in 2019, dropped their logo on each page, and filed
Most People Only Know Half the Story Ask ten healthcare workers what HIPAA is about, and nine of them will say "patient privacy."
A Single Needlestick Changed Everything for This Clinic A medical assistant at a small urgent care clinic in Ohio stuck herself with a contaminated needle
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR found that the organization had policies on
A receptionist at a small orthopedic clinic in Arizona clicked "Reply All" to an email containing 836 patient records. The breach triggered an
A home health agency in Texas got hit with two separate federal investigations in the same quarter — one from OSHA for failing to maintain a
A receptionist at a dental clinic forwarded a spreadsheet of patient names, Social Security numbers, and insurance IDs to her personal Gmail account so she
A hospital in Texas paid $2.4 million to HHS after a nurse accessed patient records without authorization — and the investigation revealed the organization had
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.