HIPAA Authorization: What Counts, What Doesn't
A psychiatrist's office in Connecticut faxed 65 pages of therapy notes to a patient's employer. The patient had signed a form
A collection of 18 posts
A psychiatrist's office in Connecticut faxed 65 pages of therapy notes to a patient's employer. The patient had signed a form
In 2023, a mid-size hospital system in the Southeast received a corrective action mandate from OCR after routinely using an outdated, overly broad release form
In 2023, OCR investigated a mid-sized specialty clinic that had been using the same patient authorization form since 2009. The form lacked three of the
In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed the organization had disclosed protected health information to
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization was routinely using deficient authorization forms that failed
In 2023, a mid-sized hospital system in the Midwest paid $125,000 to settle an OCR investigation after it disclosed patient records based on an
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization failed to provide a patient timely access to their
In 2024, Kaiser Permanente disclosed that a tracking technology breach potentially exposed the protected health information of 13.4 million individuals — one of the largest
In 2023, OCR settled with a New England dermatology practice for $300,640 after it disclosed a patient's protected health information to a
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization disclosed protected health information to a patient's
In 2023, OCR settled with a covered entity for over $100,000 after the organization disclosed protected health information without a valid authorization — partly because
In 2023, OCR settled with a healthcare provider for $50,000 after determining that the organization had disclosed protected health information using an authorization form
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.