A collection of 9 posts
In February 2023, OCR settled with a healthcare provider for $1.3 million after finding systemic failures to comply with basic HIPAA laws — failures that
When a dental practice in the Southeast received citations from both OSHA and OCR within the same quarter, the owner told me something I hear
When an OSHA inspector walks into your clinic requesting access to employee medical records, exposure logs, and workplace injury documentation, your compliance team faces a
In 2023, a mid-sized dermatology practice in Texas received citations from both OSHA and OCR within the same quarter — one for failing to train staff
In 2023, OCR settled with a health system for $1.3 million after investigators found systemic failures in safeguarding patient records — failures that traced back
In 2023 alone, the HHS Office for Civil Rights (OCR) settled or imposed penalties in dozens of enforcement actions totaling tens of millions of dollars
A medical practice manager recently told me her staff assumed that because they completed annual OSHA bloodborne pathogen training, they had also satisfied their HIPAA
In February 2024, OCR settled with a Louisiana medical group for $480,000 after determining that the organization had failed to provide patients timely access
In December 2023, HHS published a Notice of Proposed Rulemaking (NPRM) that would represent the most significant overhaul of the HIPAA Security Rule since its
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.