HIPAA regulations, compliance requirements, and violation prevention
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization failed to provide a patient timely access to their
In January 2024, a medical receptionist in Texas discovered her supervisor was accessing patient records for personal reasons — looking up neighbors, family members, even local
In December 2022, OCR issued a bulletin explicitly warning healthcare organizations about the use of tracking technologies on websites and mobile apps — including pixels from
In 2016, OCR settled with North Memorial Health Care of Minnesota for $1.55 million after determining that a business associate had provided PHI access
In 2023, OCR settled with a health system for $1.3 million after investigators found the organization had failed to implement even basic access controls
When OCR announced in May 2023 that the COVID-era telehealth HIPAA enforcement discretion was ending, thousands of healthcare organizations realized they had been operating on
When a major Texas health system paid $1.6 million in state penalties for unauthorized disclosures of protected health information, it wasn't a
In 2023, a dental practice in Texas agreed to a $50,000 settlement with OCR after an investigation revealed staff members were texting appointment reminders
In 2023, a dental practice in Texas paid a $50,000 settlement to the HHS Office for Civil Rights after an employee texted patient appointment
In 2023, a small dental practice in Texas received a $50,000 settlement with OCR after a staff member routinely texted patient appointment details, diagnoses,
In 2023, the Department of Justice recovered over $2.68 billion in settlements and judgments related to healthcare fraud — and a significant portion of those
If you've encountered the question "the blank describes how PHI may be used" in a HIPAA training module or certification exam,
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.