PHI Authorization
PHI Authorization: What Your Forms Must Include
In 2023, OCR settled with a health system that had been using an outdated authorization form for nearly four years — one that failed to include
Tag
HIPAA Compliance
HIPAA regulations, compliance requirements, and violation prevention
PHI
PHI HIPAA Compliance: Protecting Health Data in 2024
In February 2024, OCR announced a $4.75 million settlement with a nonprofit health system that failed to conduct an enterprise-wide risk analysis — leaving the
PHI
PHI in Healthcare Meaning: What Counts as Protected Data
In 2023, OCR settled with a dental practice in New England for $50,000 after it disclosed patient records to a third-party marketing firm without
PHI
PHI in Written or Verbal Form: What HIPAA Requires
In 2022, a dental practice in New England received a corrective action from OCR after an employee discussed a patient's treatment plan loudly
PHI
PHI Is an Acronym For: What Healthcare Teams Must Know
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had disclosed patient records to a third-party marketing
PHI Protection
PHI Must Be Protected in All Forms Except: Myth vs. Rule
A compliance officer at a mid-size clinic recently told me her staff believed that PHI must be protected in all forms except verbal conversations — that
PHI Data
PHI Data: What Counts, What Doesn't, and What to Protect
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had been disclosing patient records to a marketing
Privacy Rule
Privacy Rule Definition: What It Actually Requires
In February 2023, OCR settled with a dental practice for $195,000 after investigators found the organization had no written policies implementing the HIPAA Privacy
Privacy Rule
Privacy Rule Grant to Patients: Rights You Must Honor
In 2023, OCR settled with a health system for $40,000 after it failed to provide a patient timely access to her own medical records
HIPAA Privacy Rule
Privacy vs Security Rule HIPAA: Key Differences Explained
In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had addressed its Privacy Rule obligations but had done
HITECH Act
Purpose of the HITECH Act: What It Means for HIPAA
In February 2011, Cignet Health of Prince George's County, Maryland, received a $4.3 million civil money penalty from the Office for Civil
Release of Information
Release of Information Form HIPAA: What You Must Include
In 2023, a mid-sized hospital system in the Midwest paid $125,000 to settle an OCR investigation after it disclosed patient records based on an