A collection of 26 posts
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization was routinely using deficient authorization forms that failed
In 2023, a mid-sized hospital system in the Midwest paid $125,000 to settle an OCR investigation after it disclosed patient records based on an
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization failed to provide a patient timely access to their
In 2024, Kaiser Permanente disclosed that a tracking technology breach potentially exposed the protected health information of 13.4 million individuals — one of the largest
In 2023, OCR settled with a New England dermatology practice for $300,640 after it disclosed a patient's protected health information to a
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization disclosed protected health information to a patient's
In 2023, OCR settled with a covered entity for over $100,000 after the organization disclosed protected health information without a valid authorization — partly because
In 2023, OCR settled with a healthcare provider for $50,000 after determining that the organization had disclosed protected health information using an authorization form
In 2023, OCR settled with a covered entity for $40,000 after an investigation revealed the organization had disclosed protected health information without a valid
In 2023, a dental practice in the Southeast received an OCR investigation after a patient complained that their protected health information was shared with a
In 2023, OCR investigated a mid-sized hospital system that disclosed five years of patient records to a life insurance company based on an authorization form
Every week, someone contacts me asking for a "hippa waiver form" — and every week, I have to deliver the same corrective message. There
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.