Authorization of Release of Health Information Rules
A hospital in Texas released three years of a patient's psychotherapy notes to an employer — based on a form the patient had signed
A collection of 26 posts
A hospital in Texas released three years of a patient's psychotherapy notes to an employer — based on a form the patient had signed
A Missing Signature Cost One Hospital $865,000 In 2019, a patient at a mid-size medical center in the Southeast requested her records be sent
A physician's office in Connecticut handed every new patient a single sheet of paper labeled "HIPAA Form" at the front desk.
A hospital in Texas faxed 277 patient records to the wrong physician's office. No authorization on file. No tracking log. No documentation that
A surgeon's office in Texas faxed a patient's entire psychiatric history to a life insurance company. The patient hadn't
A Missing Checkbox Cost This Hospital $387,000 In 2019, Bayfront Health St. Petersburg agreed to a $85,000 corrective action settlement with OCR after
The Form That Stops Lawsuits — or Starts Them A surgeon's office in Texas faxed a patient's psychiatric records to an employer.
Last month, a medical office manager in Ohio called me in a panic. She'd just been told by a patient's attorney
A psychiatrist's office in Connecticut faxed 65 pages of therapy notes to a patient's employer. The patient had signed a form
In 2023, a mid-size hospital system in the Southeast received a corrective action mandate from OCR after routinely using an outdated, overly broad release form
In 2023, OCR investigated a mid-sized specialty clinic that had been using the same patient authorization form since 2009. The form lacked three of the
In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed the organization had disclosed protected health information to
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.