Patient Privacy Rights: What Your Practice Gets Wrong
A Mother Couldn't Get Her Own Son's Medical Records — Then the Feds Got Involved In 2019, a small medical practice in
A collection of 15 posts
A Mother Couldn't Get Her Own Son's Medical Records — Then the Feds Got Involved In 2019, a small medical practice in
A front desk receptionist at a dermatology clinic in Phoenix once told a patient's employer — over the phone — that the patient had been
The CEO Who Learned HIPAA the Hard Way In 2018, the owner of a small health plan called Filefax agreed to pay $100,000 to
A $5.1 Million Mistake Started with One Wrong Assumption In 2017, Memorial Healthcare System paid $5.1 million to settle with the Office for
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over
In February 2024, OCR announced a $4.75 million settlement with a hospital system that failed to conduct an enterprise-wide risk analysis — a requirement that
In 2023, a Texas hospital reported a breach after a nurse accessed the medical records of a coworker's ex-spouse out of curiosity — not
In December 2022, OCR settled with a dental practice for $23,000 after an employee responded to a negative online review by disclosing a patient&
OCR investigators don't grade your spelling — but if your compliance policies, workforce training materials, or Notice of Privacy Practices consistently reference "HIPPA&
When a major Texas health system paid $1.6 million in state penalties for unauthorized disclosures of protected health information, it wasn't a
In 2023, OCR settled with a health system for $40,000 after the organization failed to provide a patient timely access to her own medical
In 2024, Kaiser Permanente disclosed that a tracking technology breach potentially exposed the protected health information of 13.4 million individuals — one of the largest
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.